8.1
CVSSv3

CVE-2016-3171

Published: 12/04/2016 Updated: 09/05/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Drupal 6.x prior to 6.38, when used with PHP prior to 5.4.45, 5.5.x prior to 5.5.29, or 5.6.x prior to 5.6.13, might allow remote malicious users to execute arbitrary code via vectors related to session data truncation.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

drupal drupal 6.37

drupal drupal 6.8

drupal drupal 6.36

drupal drupal 6.34

drupal drupal 6.28

drupal drupal 6.26

drupal drupal 6.2

drupal drupal 6.18

drupal drupal 6.13

drupal drupal 6.11

drupal drupal 6.0

drupal drupal 6.7

drupal drupal 6.6

drupal drupal 6.5

drupal drupal 6.4

drupal drupal 6.25

drupal drupal 6.24

drupal drupal 6.23

drupal drupal 6.22

drupal drupal 6.21

drupal drupal 6.1

drupal drupal 6.32

drupal drupal 6.31

drupal drupal 6.30

drupal drupal 6.3

drupal drupal 6.17

drupal drupal 6.16

drupal drupal 6.15

drupal drupal 6.14

drupal drupal 6.9

drupal drupal 6.35

drupal drupal 6.33

drupal drupal 6.29

drupal drupal 6.27

drupal drupal 6.20

drupal drupal 6.19

drupal drupal 6.12

drupal drupal 6.10

debian debian linux 8.0

debian debian linux 7.0