Lucene search
MitreCVELIST:CVE-2016-10161HistoryJan 24, 2017 - 9:00 p.m.
CVE-2016-10161
2017-01-2421:00:00
mitre
www.cve.org
1
The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.
References
php.net/ChangeLog-5.php
php.net/ChangeLog-7.php
www.debian.org/security/2017/dsa-3783
www.securityfocus.com/bid/95768
www.securitytracker.com/id/1037659
access.redhat.com/errata/RHSA-2018:1296
bugs.php.net/bug.php?id=73825
github.com/php/php-src/commit/16b3003ffc6393e250f069aa28a78dc5a2c064b2
security.gentoo.org/glsa/201702-29
security.netapp.com/advisory/ntap-20180112-0001/
www.tenable.com/security/tns-2017-04
Related
nvd
nvd
CVE-2016-10161
2017-01-24 21:59:00
cve
cve
CVE-2016-10161
2017-01-24 21:59:00
osv
osv
CVE-2016-10161
2017-01-24 21:59:00
php5 - security update
2017-02-08 00:00:00
php5 - security update
2017-02-07 00:00:00
veracode
veracode
Buffer Over-Read
2019-05-16 02:59:57
Use After Free
2019-05-16 02:59:58
ubuntucve
ubuntucve
CVE-2016-10161
2017-01-24 00:00:00
prion
prion
Design/Logic Flaw
2017-01-24 21:59:00
hackerone
hackerone
Internet Bug Bounty: Out of bounds memory read in unserialize()
2017-01-24 20:38:29
debiancve
debiancve
CVE-2016-10161
2017-01-24 21:59:00
redhatcve
redhatcve
CVE-2016-10161
2017-02-03 12:49:27
ibm
ibm
nessus
nessus
PHP 5.6.x < 5.6.30 Multiple DoS
2019-01-09 00:00:00
Debian DSA-3783-1 : php5 - security update
2017-02-09 00:00:00
GLSA-201702-29 : PHP: Multiple vulnerabilities
2017-02-21 00:00:00
openvas
openvas
Debian Security Advisory DSA 3783-1 (php5 - security update)
2017-02-08 00:00:00
Mageia: Security Advisory (MGASA-2017-0040)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3783-1)
2017-02-07 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2017-02-04 21:41:12
debian
debian
[SECURITY] [DSA 3783-1] php5 security update
2017-02-09 02:28:30
[SECURITY] [DSA 3783-1] php5 security update
2017-02-09 02:28:30
[SECURITY] [DLA 818-1] php5 security update
2017-02-07 16:25:20
gentoo
gentoo
PHP: Multiple vulnerabilities
2017-02-21 00:00:00
slackware
slackware
[slackware-security] php
2017-02-10 20:41:10
amazon
amazon
Medium: php56
2017-03-28 23:30:00
Medium: php70
2017-03-29 20:15:00
suse
suse
Security update for php5 (important)
2017-02-23 15:08:17
Security update for php53 (important)
2017-02-27 18:08:46
Security update for php7 (important)
2017-03-02 15:12:04
cloudfoundry
cloudfoundry
Multiple PHP vulnerabilities | Cloud Foundry
2017-03-17 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2017-02-23 00:00:00
PHP regression
2017-03-02 00:00:00
PHP vulnerabilities
2017-02-14 00:00:00
redhat
redhat
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
apple
apple
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45