Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2016-3078
HistoryAug 07, 2016 - 10:59 a.m.

CVE-2016-3078

2016-08-0710:59:02
CWE-190
redhat
web.nvd.nist.gov
92
4
cve
2016
3078
php
zip extension
integer overflows
denial of service
heap-based buffer overflow
application crash
ziparchive class

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.344

Percentile

97.1%

JSON

Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class.

Affected configurations

Nvd
Node
phpphpRange7.0.0–7.0.6
VendorProductVersionCPE
phpphp*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Social References

More

Related

openvas 5
zdt 1
prion 1
debiancve 1
ubuntucve 1
myhack58 2
nvd 1
checkpoint_advisories 1
f5 2
exploitpack 1
packetstorm 1
exploitdb 1
cvelist 1
nessus 6
fedora 2
ubuntu 1
rosalinux 1
openvas
openvas
PHP Denial of Service Vulnerability - 01 (Aug 2016) - Windows
2016-08-17 00:00:00
PHP Denial of Service Vulnerability - 01 (Aug 2016) - Linux
2016-08-17 00:00:00
Fedora Update for php-pecl-zip FEDORA-2016-4f3c77ef90
2016-07-10 00:00:00
zdt
zdt
PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow
2016-04-28 00:00:00
prion
prion
Integer overflow
2016-08-07 10:59:00
debiancve
debiancve
CVE-2016-3078
2016-08-07 10:59:00
ubuntucve
ubuntucve
CVE-2016-3078
2016-04-29 00:00:00
myhack58
myhack58
Safety warning: PHP zip component integer overflow remote command execution-vulnerability warning-the black bar safety net
2016-05-09 00:00:00
CVE-2016-3078 PHP ZipArchive Integer Overflow analysis-vulnerability warning-the black bar safety net
2017-03-15 00:00:00
nvd
nvd
CVE-2016-3078
2016-08-07 10:59:02
checkpoint_advisories
checkpoint_advisories
PHP ZIP Archive Heap Overflow (CVE-2016-3078)
2016-05-03 00:00:00
f5
f5
SOL56138200 - PHP vulnerability CVE-2016-3078
2016-05-24 00:00:00
K56138200 : PHP vulnerability CVE-2016-3078
2016-05-24 00:00:00
exploitpack
exploitpack
PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow
2016-04-28 00:00:00
packetstorm
packetstorm
PHP 7.x Heap Overflow
2016-04-28 00:00:00
exploitdb
exploitdb
PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow
2016-04-28 00:00:00
cvelist
cvelist
CVE-2016-3078
2016-08-07 10:00:00
nessus
nessus
Fedora 23 : php-pecl-zip (2016-4f3c77ef90)
2016-07-15 00:00:00
Fedora 24 : php-pecl-zip (2016-79ac80a0d5)
2016-07-15 00:00:00
PHP 7.0.x < 7.0.6 Multiple Vulnerabilities
2019-01-09 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: php-pecl-zip-1.13.3-1.fc24
2016-07-02 15:45:20
[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.3-1.fc23
2016-07-02 19:34:44
ubuntu
ubuntu
PHP vulnerabilities
2016-05-24 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.344

Percentile

97.1%

JSON
Related for CVE-2016-3078
openvas5zdt1prion1debiancve1ubuntucve1myhack582nvd1checkpoint_advisories1f52exploitpack1packetstorm1exploitdb1cvelist1nessus6fedora2ubuntu1rosalinux1