GitHub Advisory DatabaseGHSA-M6CH-GG5F-WXX3HTTP Proxy header vulnerability
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.951 High
EPSS
Percentile
99.3%
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application’s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(‘HTTP_PROXY’) call or (2) a CGI configuration of PHP, aka an “httpoxy” issue.
References
lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
rhn.redhat.com/errata/RHSA-2016-1609.html
rhn.redhat.com/errata/RHSA-2016-1610.html
rhn.redhat.com/errata/RHSA-2016-1611.html
rhn.redhat.com/errata/RHSA-2016-1612.html
rhn.redhat.com/errata/RHSA-2016-1613.html
www.debian.org/security/2016/dsa-3631
www.kb.cert.org/vuls/id/797896
www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
www.securityfocus.com/bid/91821
www.securitytracker.com/id/1036335
bugzilla.redhat.com/show_bug.cgi?id=1353794
github.com/advisories/GHSA-m6ch-gg5f-wxx3
github.com/amphp/artax/commit/81254742812a5a9adf4b085f543f3f21daedcd97
github.com/amphp/artax/commit/b60cf493c9e577a3678865f620b1eb61ab3d7ca9
github.com/bugsnag/bugsnag-laravel/pull/143
github.com/bugsnag/bugsnag-laravel/pull/145
github.com/bugsnag/bugsnag-laravel/releases/tag/v2.0.2
github.com/FriendsOfPHP/security-advisories/blob/master/amphp/artax/CVE-2016-5385.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/bugsnag/bugsnag-laravel/CVE-2016-5385.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-5385.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-5385.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2016-5385.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/padraic/humbug_get_contents/CVE-2016-5385.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2016-5385.yaml
github.com/guzzle/guzzle/blob/4.x/CHANGELOG.md#424-2016-07-18
github.com/guzzle/guzzle/blob/5.3/CHANGELOG.md#531---2016-07-18
github.com/guzzle/guzzle/blob/master/CHANGELOG.md#622---2016-10-08
github.com/guzzle/guzzle/releases/tag/6.2.1
github.com/humbug/file_get_contents/pull/23
github.com/humbug/file_get_contents/pull/23/commits/848e8c282a863654e76bd958acfb57c81cb739b5
github.com/humbug/file_get_contents/releases/tag/1.1.2
h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05333297
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
httpoxy.org/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/
lists.fedoraproject.org/archives/list/[email protected]/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/
lists.fedoraproject.org/archives/list/[email protected]/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/
lists.fedoraproject.org/archives/list/[email protected]/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/
nvd.nist.gov/vuln/detail/CVE-2016-5385
security.gentoo.org/glsa/201611-22
twitter.com/asyncphp/status/755136084917583872
typo3.org/security/advisory/typo3-core-sa-2016-019
www.drupal.org/SA-CORE-2016-003
Related
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.951 High
EPSS
Percentile
99.3%