PT-2016-3380 · Php+2 · Php+2

Nguyenvuhoang199321 · Published 2016-09-17 · Updated 2018-05-04 · CVE-2016-7414

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.26 PHP versions 7.x prior to 7.0.11

Description The issue is related to the ZIP signature-verification feature, which does not ensure that the uncompressed filesize field is large enough. This allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have other unspecified impacts via a crafted PHAR archive. The problem is associated with the files ext/phar/util.c and ext/phar/zip.c.

Recommendations For PHP versions prior to 5.6.26, update to version 5.6.26 or later. For PHP versions 7.x prior to 7.0.11, update to version 7.0.11 or later. As a temporary workaround, consider restricting the use of PHAR archives until a patch is applied.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-02411

CVE-2016-7414

DLA-749-1

DSA-3689-1

MGASA-2016-0319

OPENSUSE-SU-2016_2444-1

OPENSUSE-SU-2016_2540-1

RHSA-2018:1296

SUSE-SU-2016:2459-1

SUSE-SU-2016:2460-1

SUSE-SU-2016:2460-2

SUSE-SU-2016:2461-1

SUSE-SU-2016:2477-1

SUSE-SU-2016:2477-2

USN-3095-1

Affected Products

Php

Suse

Ubuntu

References · 124

• 🔥 https://bugs.php.net/bug.php?id=72928 · Exploit
• https://github.com/php/php-src/commit/0bfb970f43acd1e81d11be1154805f86655f15d5?w=1 · Patch
• https://ubuntu.com/security/CVE-2016-7413 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3095-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7127 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0319.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7414 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3689-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2459-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7414 · Security Note
• https://bdu.fstec.ru/vul/2022-02411 · Security Note
• https://ubuntu.com/security/CVE-2016-7134 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2460-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7417 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7412 · Security Note