PT-2016-2088 · Php+1 · Php+1
Manhluat
·
Publicado
2016-05-21
·
Atualizado
2022-07-20
·
CVE-2016-4346
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 7.0.4
Description
The issue is related to an integer overflow in the
str pad function, which can cause a heap-based buffer overflow when a long string is used. This can allow a remote attacker to cause a denial of service or possibly have other unspecified impacts.Recommendations
For PHP versions prior to 7.0.4, update to version 7.0.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
str pad function with long strings until a patch is available.Exploit
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Php
Suse