Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2016-6289
HistoryJul 25, 2016 - 2:59 p.m.

CVE-2016-6289

2016-07-2514:59:00
Debian Security Bug Tracker
security-tracker.debian.org
12

0.008 Low

EPSS

Percentile

81.8%

Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive.

OSVersionArchitecturePackageVersionFilename
Debian9allphp7.0< 7.0.33-0+deb9u8php7.0_7.0.33-0+deb9u8_all.deb