PT-2016-2086 · Php+2 · Php+2

Salvatore Bonaccorso

·

Published

2016-05-06

·

Updated

2018-10-30

·

CVE-2016-4538

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.35 PHP versions 5.6.x prior to 5.6.21 PHP versions 7.x prior to 7.0.6
Description The issue exists due to insufficient input validation in the bcpowmod function of the PHP interpreter. This can be exploited by a remote attacker to cause a denial of service or possibly have other unspecified impacts via a specially crafted call. The bcpowmod function modifies certain data structures without considering whether they are copies of the global variables.
Recommendations For PHP versions prior to 5.5.35, update to version 5.5.35 or later. For PHP versions 5.6.x prior to 5.6.21, update to version 5.6.21 or later. For PHP versions 7.x prior to 7.0.6, update to version 7.0.6 or later.

Exploit

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2016-01438
CVE-2016-4538
DLA-628-1
DSA-3602-1
RHSA-2016:2750
SUSE-SU-2016:1504-1
SUSE-SU-2016:1581-1
SUSE-SU-2016:1638-1
USN-2984-1

Affected Products

Php
Suse
Ubuntu