CVE-2017-11147: In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying m...

Security readout for executives and security teams

This is an old PHP PHAR archive parsing flaw. If an application lets attackers supply archive files that PHP processes, PHP could crash and may disclose memory contents. The main business concern is legacy PHP exposure in file-upload or archive-processing workflows, not broad internet-wide compromise evidence. Exposure is most likely where obsolete PHP versions process untrusted PHAR archives, uploaded files, or application-controlled archive paths. Systems already on maintained PHP or vendor-patched distro builds are less likely exposed. The bundle does not identify specific third-party applications beyond PHP and downstream vendor advisories. Prioritize remediation if legacy PHP is still used in upload-heavy or archive-processing applications. For organizations already off PHP 5.6 and early PHP 7.0, this should be a verification and cleanup item rather than an emergency response. Mitigation focus: Upgrade PHP beyond 5.6.30 or 7.0.15, or to a supported maintained branch.; Apply vendor security updates for packaged PHP builds, including distro or appliance advisories.; Restrict untrusted PHAR or archive processing until patched..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.