Published: 07/08/2016 Updated: 20/07/2022

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

spl_array.c in the SPL extension in PHP prior to 5.5.37 and 5.6.x prior to 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote malicious users to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php
opensuse leap 42.1
opensuse opensuse 13.2
debian debian linux 8.0

Synopsis Moderate: rh-php56 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php56, rh-php56-php, and rh-php56-php-pear is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Mo ...

Several security issues were fixed in PHP ...

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development The vulnerabilities are addressed by upgrading PHP to the new upstream version 5623, which includes additional bug fixes Please refer to the upstream changelog for more information: phpnet/ChangeLog-5php#5623 ...

A stack consumption vulnerability in GD in PHP allows remote attackers to cause a denial of service via a crafted imagefilltoborder call (CVE-2015-8874) An integer overflow, leading to a heap-based buffer overflow was found in the imagecreatefromgd2() function of PHP's gd extension A remote attacker could use this flaw to crash a PHP application ...

spl_arrayc in the SPL extension in PHP before 5537 and 56x before 5623 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data ...

Kerio Control Unified Threat Management versions prior to 913 suffer from unsafe usage of the PHP unserialize function, code execution, memory corruption, cross site scripting, and various other vulnerabilities ...

CWE-416 http://php.net/ChangeLog-5.php http://www.openwall.com/lists/oss-security/2016/06/23/4 https://bugs.php.net/bug.php?id=72433 http://github.com/php/php-src/commit/3f627e580acfdaf0595ae3b115b8bec677f203ee?w=1 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 https://support.apple.com/HT207170 http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html http://www.debian.org/security/2016/dsa-3618 http://www.securityfocus.com/bid/91401 http://rhn.redhat.com/errata/RHSA-2016-2750.html https://access.redhat.com/errata/RHSA-2016:2750 https://nvd.nist.gov https://usn.ubuntu.com/3045-1/

CVE-2016-5771

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect