CVE catalog
CVE-2017-7189
UBUNTU-CVE-2017-7189
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.43% · Oct 25, 2026
main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number (i.e., 443 in this example) is hardcoded into an application as a security policy, but the hostname argument (i.e., 127.0.0.1:80 in this example) is obtained from untrusted input.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | php5 | pro | 5.5.3+dfsg-1ubuntu2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.3+dfsg-1ubuntu3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.6+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.6+dfsg-1ubuntu2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.8+dfsg-2ubuntu1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.4 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.5 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.6 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.7 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.9 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.11 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.12 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.13 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.14 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.16 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.17 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.19 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.20 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.21 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.22 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.23 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.24 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.25 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.26 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.27 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm4 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm5 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm6 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm8 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm10 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm11 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm12 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm13 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm14 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm15 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm16 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm17 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm18 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.1-5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.1-6 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.3-2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.3-3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.3-9ubuntu1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-5ubuntu1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-5ubuntu2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-7ubuntu1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-7ubuntu2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-7ubuntu2.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.8-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.8-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.8-0ubuntu0.16.04.3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.13-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.15-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.15-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.15-0ubuntu0.16.04.4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.18-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.22-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.25-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.28-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.30-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.32-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.6 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.7 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.9 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.11 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.12 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.14 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.15 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm6 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm7 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm8 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm9 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm10 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm11 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm12 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm13 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm14 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm15 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm16 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm17 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm18 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm19 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm20 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm21 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm22 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.1-1ubuntu2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.2-1ubuntu1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.2-1ubuntu2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.3-1ubuntu1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.5-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.7-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.7-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.10-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.15-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.15-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.17-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.19-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.19-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.3 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.4 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.6 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.7 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.8 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.9 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.10 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.11 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.12 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.13 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.15 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.16 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm3 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm4 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm5 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm6 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm7 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm8 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm9 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm10 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm11 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm12 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm13 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm14 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4build1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4build2 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu1.1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.2 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.4 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.5 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.6 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.7 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.8 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.9 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.10 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.11 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.12 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.13 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.15 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.16 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.17 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.18 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.19 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.20 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.22 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.23 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.24 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.26 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.28 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm2 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm3 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm4 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm5 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.0~rc4-1ubuntu2 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.0-1 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu1 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.1 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.2 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.3 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.4 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.5 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.6 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.8 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.9 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.10 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.11 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.13 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.14 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.15 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.17 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.18 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.19 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.20 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.21 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.22 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.23 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.24 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.25 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.26 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.27 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.28 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: