Lucene search
F5F5:K15850913HistoryDec 07, 2016 - 12:00 a.m.
K15850913 : PHP vulnerability CVE-2016-6290
2016-12-0700:00:00
my.f5.com
82
Security Advisory Description
ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization. (CVE-2016-6290)
Impact
An attacker can cause a denial-of-service (DoS) attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
debiancve
debiancve
CVE-2016-6290
2016-07-25 14:59:00
cve
cve
CVE-2016-6290
2016-07-25 14:59:02
prion
prion
Deserialization of untrusted data
2016-07-25 14:59:00
ubuntucve
ubuntucve
CVE-2016-6290
2016-07-25 00:00:00
redhatcve
redhatcve
CVE-2016-6290
2016-07-25 10:48:25
nvd
nvd
CVE-2016-6290
2016-07-25 14:59:02
cvelist
cvelist
CVE-2016-6290
2016-07-25 14:00:00
nessus
nessus
PHP < 5.5.38, 5.6.24, 7.0.9 Multiple Vulnerabilities
2016-09-01 00:00:00
SUSE SLES11 Security Update : php53 (SUSE-SU-2016:2210-1)
2016-09-08 00:00:00
Debian DSA-3631-1 : php5 - security update (httpoxy)
2016-07-27 00:00:00
ibm
ibm
mageia
mageia
Updated php/xmlrpc-epi/timezone packages fix security vulnerability
2016-07-27 00:59:16
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0267)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2210-1)
2021-06-09 00:00:00
Debian: Security Advisory (DSA-3631-1)
2016-08-02 00:00:00
debian
debian
[SECURITY] [DSA 3631-1] php5 security update
2016-07-26 20:46:29
[SECURITY] [DLA 628-1] php5 security update
2016-09-18 15:12:08
suse
suse
Security update for php5 (important)
2016-08-16 13:10:01
Security update for php53 (important)
2016-09-16 21:09:09
Security update for php5 (important)
2016-09-28 15:09:48
freebsd
freebsd
php -- multiple vulnerabilities
2016-07-21 00:00:00
osv
osv
php5 - security update
2016-09-18 00:00:00
cloudfoundry
cloudfoundry
USN-3045-1 PHP vulnerabilities | Cloud Foundry
2016-09-09 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-08-02 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
apple
apple
About the security content of macOS Sierra 10.12
2016-09-20 00:00:00
About the security content of macOS Sierra 10.12 - Apple Support
2017-01-23 05:36:06
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
veracode
veracode
Out-Of-Bounds Read
2019-05-02 06:02:24
Arbitrary Code Execution
2019-05-02 06:02:23
Denial Of Service (DoS)
2019-05-02 06:02:21
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00