Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2016-7125HistorySep 12, 2016 - 1:59 a.m.
CVE-2016-7125
2016-09-1201:59:00
Debian Security Bug Tracker
security-tracker.debian.org
11
0.006 Low
EPSS
Percentile
78.1%
ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | php7.0 | < 7.0.33-0+deb9u8 | php7.0_7.0.33-0+deb9u8_all.deb |
Related
f5
f5
SOL35232053 - PHP vulnerability CVE-2016-7125
2016-11-15 00:00:00
K35232053 : PHP vulnerability CVE-2016-7125
2016-11-15 00:00:00
ubuntucve
ubuntucve
CVE-2016-7125
2016-09-11 00:00:00
cvelist
cvelist
CVE-2016-7125
2016-09-12 01:00:00
nvd
nvd
CVE-2016-7125
2016-09-12 01:59:03
nessus
nessus
F5 Networks BIG-IP : PHP vulnerability (K35232053)
2017-03-02 00:00:00
PHP 5.6.x < 5.6.25 Multiple Vulnerabilities
2016-08-23 00:00:00
Tenable SecurityCenter PHP < 5.6.25 Multiple Vulnerabilities (TNS-2016-09)
2017-06-26 00:00:00
redhatcve
redhatcve
CVE-2016-7125
2016-09-09 13:18:41
prion
prion
Design/Logic Flaw
2016-09-12 01:59:00
cve
cve
CVE-2016-7125
2016-09-12 01:59:03
ibm
ibm
openvas
openvas
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Linux
2016-09-12 00:00:00
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Windows
2016-09-12 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2337-1)
2016-09-20 00:00:00
suse
suse
Security update for php5 (important)
2016-09-19 19:09:23
Security update for php53 (important)
2016-10-05 18:12:21
Security update for php53 (important)
2016-09-16 21:09:09
slackware
slackware
[slackware-security] php
2016-09-08 22:38:27
cloudfoundry
cloudfoundry
USN-3095-1 PHP vulnerabilities | Cloud Foundry
2016-10-04 00:00:00
debian
debian
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
ubuntu
ubuntu
PHP vulnerabilities
2016-10-04 00:00:00
osv
osv
php5 - security update
2016-09-18 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 06:02:19
Arbitrary Code Execution
2019-05-02 06:02:18
Denial Of Service (DoS) Through Memory Corruption
2019-05-02 06:02:24
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45