PT-2016-3378 · Php+2 · Php+2

Ahihibughunter

·

Publicado

2016-09-17

·

Atualizado

2018-05-04

·

CVE-2016-7417

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.26 PHP versions 7.x prior to 7.0.11
Description The issue arises from insufficient input validation in the ext/spl/spl array.c component of the PHP interpreter. This allows remote attackers to cause a denial of service or possibly have other unspecified impacts by exploiting the vulnerability with specially crafted serialized data.
Recommendations For PHP versions prior to 5.6.26, update to version 5.6.26 or later to resolve the issue. For PHP versions 7.x prior to 7.0.11, update to version 7.0.11 or later to resolve the issue.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2022-02409
CVE-2016-7417
DLA-749-1
DSA-3689-1
MGASA-2016-0319
OPENSUSE-SU-2016_2444-1
OPENSUSE-SU-2016_2540-1
RHSA-2018:1296
SUSE-SU-2016:2459-1
SUSE-SU-2016:2460-1
SUSE-SU-2016:2460-2
SUSE-SU-2016:2461-1
SUSE-SU-2016:2477-1
SUSE-SU-2016:2477-2
USN-3095-1

Produtos afetados

Php
Suse
Ubuntu