PT-2016-3391 · Php+2 · Php+2

Fernando

·

Published

2016-07-25

·

Updated

2018-01-05

·

CVE-2016-6294

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.38 PHP versions 5.6.x prior to 5.6.24 PHP versions 7.x prior to 7.0.9
Description The issue is related to the locale accept from http function in PHP, which does not properly restrict calls to the ICU uloc acceptLanguageFromHTTP function. This allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument.
Recommendations For PHP versions prior to 5.5.38, update to version 5.5.38 or later. For PHP versions 5.6.x prior to 5.6.24, update to version 5.6.24 or later. For PHP versions 7.x prior to 7.0.9, update to version 7.0.9 or later. As a temporary workaround, consider restricting access to the locale accept from http function until a patch is available.

Exploit

Fix

DoS

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2022-02466
CVE-2016-6294
DLA-628-1
DSA-3631-1
MGASA-2016-0267
RHSA-2016:2750
SUSE-SU-2017:1585-1
SUSE-SU-2017:1662-1
SUSE-SU-2017:1717-1
SUSE-SU-2017_1585-1
SUSE-SU-2017_1662-1
SUSE-SU-2017_1717-1
USN-3045-1

Affected Products

Php
Suse
Ubuntu