CVE-2017-7272

PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function.

• CWE-918

• http://www.securityfocus.com/bid/97178Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038158
• https://bugs.php.net/bug.php?id=74216Issue Tracking, Vendor Advisory
• https://bugs.php.net/bug.php?id=75505
• https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595aIssue Tracking, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20180112-0001/
• https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt
• http://www.securityfocus.com/bid/97178Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038158
• https://bugs.php.net/bug.php?id=74216Issue Tracking, Vendor Advisory
• https://bugs.php.net/bug.php?id=75505
• https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595aIssue Tracking, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20180112-0001/
• https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt

Published

Mar 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7262The AMD Ryzen processor with AGESA microcode through 2017-01…
• CVE-2017-7263The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 …
• CVE-2017-7264Use-after-free vulnerability in the fz_subsample_pixmap func…5.3
• CVE-2017-7266Netflix Security Monkey before 0.8.0 has an Open Redirect. T…
• CVE-2017-7269Buffer overflow in the ScStoragePathFromUrl function in the …9.8
• CVE-2017-7271Reflected Cross-site scripting (XSS) vulnerability in Yii Fr…
• CVE-2017-7273The cp_report_fixup function in drivers/hid/hid-cypress.c in…
• CVE-2017-7274The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in rad…
• CVE-2017-7275The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0…
• CVE-2017-7276There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7…
• CVE-2017-7277The TCP stack in the Linux kernel through 4.10.6 mishandles …
• CVE-2017-7278Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttele…