10
CVSSv2

CVE-2016-2554

Published: 16/05/2016 Updated: 05/01/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in ext/phar/tar.c in PHP prior to 5.5.32, 5.6.x prior to 5.6.18, and 7.x prior to 7.0.3 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

php php 7.0.1

php php 7.0.0

php php 7.0.2

php php

php php 5.6.4

php php 5.6.3

php php 5.6.11

php php 5.6.10

php php 5.6.0

php php 5.6.9

php php 5.6.2

php php 5.6.17

php php 5.6.16

php php 5.6.1

php php 5.6.6

php php 5.6.5

php php 5.6.13

php php 5.6.12

php php 5.6.8

php php 5.6.7

php php 5.6.15

php php 5.6.14

Vendor Advisories

Synopsis Moderate: rh-php56 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php56, rh-php56-php, and rh-php56-php-pear is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Mo ...
USN-2952-1 caused a regression in PHP ...
Several security issues were fixed in PHP ...
A stack overflow vulnerability was reported that may occur when decompressing tar archives due to phar_tar_writeheaders() potentially copying non-terminated linknames from entries parsed by phar_parse_tarfile() ...
Stack-based buffer overflow in ext/phar/tarc in PHP before 5532, 56x before 5618, and 7x before 703 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive ...