PT-2016-3402 · Php+2 · Php+2

Dario Weißer + 1 · Published 2016-06-24 · Updated 2022-07-20 · CVE-2016-5771

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.37 PHP versions 5.6.x prior to 5.6.23

Description The issue is related to improper interaction between the SPL extension and the unserialize implementation, along with garbage collection. This can be exploited by remote attackers using crafted serialized data, potentially leading to the execution of arbitrary code or a denial of service, resulting in a use-after-free condition and application crash.

Recommendations For PHP versions prior to 5.5.37, update to version 5.5.37 or later. For PHP versions 5.6.x prior to 5.6.23, update to version 5.6.23 or later.

Exploit

Fix

RCE

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2022-02540

CVE-2016-5771

DLA-628-1

DSA-3618-1

MGASA-2016-0238

OPENSUSE-SU-2016_1761-1

RHSA-2016:2750

SUSE-SU-2016:1842-1

SUSE-SU-2018:0806-1

USN-3045-1

Affected Products

Php

Suse

Ubuntu

References · 171

• 🔥 https://bugs.php.net/bug.php?id=72433 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2016:1842-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-5771 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5114 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8876 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5770 · Security Note
• https://bdu.fstec.ru/vul/2022-02517 · Security Note
• https://ubuntu.com/security/notices/USN-3045-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02539 · Security Note
• https://cve.org/CVERecord?id=CVE-2016-5771 · Security Note
• https://ubuntu.com/security/CVE-2016-6289 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02544 · Security Note
• https://bdu.fstec.ru/vul/2022-02536 · Security Note
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0238 · Vendor Advisory