7.5
CVSSv3

CVE-2016-10159

Published: 24/01/2017 Updated: 29/08/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP prior to 5.6.30 and 7.0.x prior to 7.0.15 allows remote malicious users to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

php php

php php 7.1.0

debian debian linux 8.0

Vendor Advisories

Synopsis Moderate: rh-php70-php security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php70-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabilit ...
Several security issues were fixed in PHP ...
USN-3211-1 introduced a regression in PHP ...
Several security issues were fixed in PHP ...
Integer overflow in gd_ioc in the GD Graphics Library (aka libgd) before 224 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image(CVE-2016-10168) The object_common1 function in ext/standard/var_unserializerc in PHP before 5630, 70x before 7015, and 71x before ...
Integer overflow in gd_ioc in the GD Graphics Library (aka libgd) before 224 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image (CVE-2016-10168) In all versions of PHP 7, during the unserialization process, resizing the 'properties'; hash table of a serialized object ...
Integer overflow in the phar_parse_pharfile function in ext/phar/pharc in PHP before 5630 and 70x before 7015 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive ...
SecurityCenter has recently been discovered to contain several vulnerabilities Four issues in the SC code were discovered during internal testing by Barry Clark, and several third-party libraries were upgraded as part of our internal security process Note that the library vulnerabilities were not fully diagnosed so SecurityCenter is possibly impa ...