Lucene search

K
cvelistMitreCVELIST:CVE-2016-4343
HistoryMay 22, 2016 - 1:00 a.m.

CVE-2016-4343

2016-05-2201:00:00
mitre
www.cve.org
2

9 High

AI Score

Confidence

High

0.291 Low

EPSS

Percentile

96.9%

The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive.