Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2016-4072HistoryMay 20, 2016 - 11:00 a.m.
CVE-2016-4072
2016-05-2011:00:00
Debian Security Bug Tracker
security-tracker.debian.org
18
EPSS
0.069
Percentile
93.9%
The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | php7.0 | < 7.0.33-0+deb9u8 | php7.0_7.0.33-0+deb9u8_all.deb |
Related
nvd
nvd
CVE-2016-4072
2016-05-20 11:00:16
f5
f5
K08206127 : PHP vulnerability CVE-2016-4072
2016-06-21 00:00:00
SOL08206127 - PHP vulnerability CVE-2016-4072
2016-06-21 00:00:00
ubuntucve
ubuntucve
CVE-2016-4072
2016-04-25 00:00:00
cve
cve
CVE-2016-4072
2016-05-20 11:00:16
prion
prion
Code injection
2016-05-20 11:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 06:02:18
Insecure Pseudo Random Number Generator
2019-05-02 06:02:16
Arbitrary Code Execution
2019-05-02 06:02:23
cvelist
cvelist
CVE-2016-4072
2016-05-20 10:00:00
debian
debian
[SECURITY] [DSA 3560-1] php5 security update
2016-04-27 20:06:49
[SECURITY] [DSA 3560-1] php5 security update
2016-04-27 20:06:49
[SECURITY] [DLA 499-1] php5 security update
2016-05-31 20:07:56
nessus
nessus
PHP 5.5.x < 5.5.34 Multiple Vulnerabilities
2016-04-06 00:00:00
Debian DSA-3560-1 : php5 - security update
2016-04-28 00:00:00
PHP 7.0.x < 7.0.5 Multiple Vulnerabilities
2016-04-06 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3560-1)
2016-04-26 00:00:00
amazon
amazon
Important: php56, php55
2016-05-03 10:30:00
ibm
ibm
osv
osv
php5 - security update
2016-05-31 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-05-24 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
apple
apple
redhat
redhat