PT-2016-5359 · Php+1 · Php+1

Hans Jerry Illikainen · Published 2016-04-29 · Updated 2022-07-20 · CVE-2016-3078

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.0.6

Description The issue is related to multiple integer overflows in the zip extension, specifically in the php zip.c file. This can be exploited by remote attackers through crafted calls to the getFromIndex or getFromName functions in the ZipArchive class, potentially leading to a denial of service (heap-based buffer overflow and application crash) or other unspecified impacts.

Recommendations For PHP versions prior to 7.0.6, update to version 7.0.6 or later to resolve the issue.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-3078

USN-2984-1

Affected Products

Php

Ubuntu

References · 30

• 🔥 https://bugs.php.net/bug.php?id=71923 · Exploit
• 🔥 https://exploit-db.com/exploits/39742 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2016/04/28/1 · Exploit
• https://github.com/php/php-src/commit/3b8d4de300854b3517c7acb239b84f7726c1353c?w=1 · Patch
• https://ubuntu.com/security/CVE-2016-4342 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-3078 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2984-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4541 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4542 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2984-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4539 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4540 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4544 · Vendor Advisory