HexBrain

Internet Bug Bounty · Report #305973

Inappropriately parsing HTTP response leads to PHP segment fault!

Validstatus
lowseverity
$500bounty
6upvotes
12 Nov 2019disclosed

How it was found

Description


A NULL Pointer Deference in parsing HTTP header. It is very easy to trigger this segment fault and may be vulnerable in some scenarios.

 

Original bug report


 

Note


  • None

  Thanks :)

Impact

Segment fault

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original