PT-2016-5359 · Php+1 · Php+1

Hans Jerry Illikainen · Publicado 2016-04-29 · Atualizado 2022-07-20 · CVE-2016-3078

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.0.6

Description The issue is related to multiple integer overflows in the zip extension, specifically in the php zip.c file. This can be exploited by remote attackers through crafted calls to the getFromIndex or getFromName functions in the ZipArchive class, potentially leading to a denial of service (heap-based buffer overflow and application crash) or other unspecified impacts.

Recommendations For PHP versions prior to 7.0.6, update to version 7.0.6 or later to resolve the issue.

Exploit

Correção

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-3078

USN-2984-1

Produtos afetados

Php

Ubuntu

Referências · 30

• 🔥 https://bugs.php.net/bug.php?id=71923 · Exploit
• 🔥 https://exploit-db.com/exploits/39742 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2016/04/28/1 · Exploit
• https://github.com/php/php-src/commit/3b8d4de300854b3517c7acb239b84f7726c1353c?w=1 · Correção
• https://ubuntu.com/security/CVE-2016-4342 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-3078 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2984-1 · Aviso do Fabricante
• http://securitytracker.com/id/1035701 · Nota
• https://ubuntu.com/security/CVE-2016-4541 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-3132 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4542 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2984-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-3078 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4539 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4540 · Aviso do Fabricante