Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2016-10161HistoryJan 24, 2017 - 9:59 p.m.
CVE-2016-10161
2017-01-2421:59:00
Debian Security Bug Tracker
security-tracker.debian.org
15
0.036 Low
EPSS
Percentile
91.7%
The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | php7.0 | < 7.0.33-0+deb9u8 | php7.0_7.0.33-0+deb9u8_all.deb |
Related
nvd
nvd
CVE-2016-10161
2017-01-24 21:59:00
cve
cve
CVE-2016-10161
2017-01-24 21:59:00
osv
osv
CVE-2016-10161
2017-01-24 21:59:00
php5 - security update
2017-02-08 00:00:00
php5 - security update
2017-02-07 00:00:00
veracode
veracode
Buffer Over-Read
2019-05-16 02:59:57
Use After Free
2019-05-16 02:59:58
ubuntucve
ubuntucve
CVE-2016-10161
2017-01-24 00:00:00
cvelist
cvelist
CVE-2016-10161
2017-01-24 21:00:00
redhatcve
redhatcve
CVE-2016-10161
2017-02-03 12:49:27
prion
prion
Design/Logic Flaw
2017-01-24 21:59:00
hackerone
hackerone
Internet Bug Bounty: Out of bounds memory read in unserialize()
2017-01-24 20:38:29
ibm
ibm
openvas
openvas
Debian Security Advisory DSA 3783-1 (php5 - security update)
2017-02-08 00:00:00
Mageia: Security Advisory (MGASA-2017-0040)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3783-1)
2017-02-07 00:00:00
nessus
nessus
PHP 5.6.x < 5.6.30 Multiple DoS
2019-01-09 00:00:00
Debian DSA-3783-1 : php5 - security update
2017-02-09 00:00:00
GLSA-201702-29 : PHP: Multiple vulnerabilities
2017-02-21 00:00:00
debian
debian
[SECURITY] [DSA 3783-1] php5 security update
2017-02-09 02:28:30
[SECURITY] [DSA 3783-1] php5 security update
2017-02-09 02:28:30
[SECURITY] [DLA 818-1] php5 security update
2017-02-07 16:25:20
mageia
mageia
Updated php packages fix security vulnerabilities
2017-02-04 21:41:12
gentoo
gentoo
PHP: Multiple vulnerabilities
2017-02-21 00:00:00
amazon
amazon
Medium: php56
2017-03-28 23:30:00
Medium: php70
2017-03-29 20:15:00
slackware
slackware
[slackware-security] php
2017-02-10 20:41:10
suse
suse
Security update for php53 (important)
2017-02-27 18:08:46
Security update for php5 (important)
2017-02-23 15:08:17
Security update for php7 (important)
2017-03-02 15:12:04
ubuntu
ubuntu
PHP vulnerabilities
2017-02-14 00:00:00
PHP regression
2017-03-02 00:00:00
PHP vulnerabilities
2017-02-23 00:00:00
cloudfoundry
cloudfoundry
Multiple PHP vulnerabilities | Cloud Foundry
2017-03-17 00:00:00
redhat
redhat
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
apple
apple
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45