PT-2016-2094 · Php+2 · Php+2
Andrew Kramer
·
Published
2016-04-21
·
Updated
2018-01-05
·
CVE-2016-4071
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 5.5.34
PHP versions 5.6.x prior to 5.6.20
PHP versions 7.x prior to 7.0.5
Description
The issue exists due to insufficient input validation in the php snmp error function. This allows a remote attacker to execute arbitrary code via format string specifiers in an SNMP::get call.
Recommendations
For PHP versions prior to 5.5.34, update to version 5.5.34 or later.
For PHP versions 5.6.x prior to 5.6.20, update to version 5.6.20 or later.
For PHP versions 7.x prior to 7.0.5, update to version 7.0.5 or later.
As a temporary workaround, consider restricting the use of the
php snmp error function until a patch is available.
Avoid using format string specifiers in SNMP::get calls until the issue is resolved.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Php
Suse
Ubuntu