Lucene search
F5F5:K29691966HistoryDec 22, 2016 - 12:00 a.m.
K29691966 : PHP vulnerability CVE-2016-5773
2016-12-2200:00:00
my.f5.com
67
Security Advisory Description
php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object. (CVE-2016-5773)
Impact
BIG-IP, BIG-IQ, F5 iWorkflow, Enterprise Manager, ARX, LineRate, Traffix SDC
None
F5 WebSafe Alert Server
The impact is currently unknown. F5 is still researching the issue and will update this article when the information has been confirmed. F5 Technical Support has no additional information about this issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
nvd
nvd
CVE-2016-5773
2016-08-07 10:59:21
CVE-2016-6295
2016-07-25 14:59:08
openvas
openvas
Fedora Update for php-pecl-zip FEDORA-2016-b08d0b00fc
2016-07-10 00:00:00
Fedora Update for php-pecl-zip FEDORA-2016-79ac80a0d5
2016-07-10 00:00:00
Fedora Update for php-pecl-zip FEDORA-2016-4f3c77ef90
2016-07-10 00:00:00
redhatcve
redhatcve
CVE-2016-5773
2016-06-29 12:18:26
CVE-2016-6295
2016-07-25 14:19:51
cvelist
cvelist
CVE-2016-5773
2016-08-07 10:00:00
CVE-2016-6295
2016-07-25 14:00:00
debiancve
debiancve
CVE-2016-5773
2016-08-07 10:59:00
CVE-2016-6295
2016-07-25 14:59:00
cve
cve
CVE-2016-5773
2016-08-07 10:59:21
CVE-2016-6295
2016-07-25 14:59:08
prion
prion
Design/Logic Flaw
2016-08-07 10:59:00
Design/Logic Flaw
2016-07-25 14:59:00
ubuntucve
ubuntucve
CVE-2016-5773
2016-06-24 00:00:00
CVE-2016-6295
2016-07-25 00:00:00
nessus
nessus
Fedora 22 : php-pecl-zip (2016-b08d0b00fc)
2016-07-15 00:00:00
Fedora 24 : php-pecl-zip (2016-79ac80a0d5)
2016-07-15 00:00:00
SUSE SLED12 / SLES12 Security Update : php5 (SUSE-SU-2016:2975-1)
2016-12-05 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: php-pecl-zip-1.12.5-2.fc22
2016-07-02 19:28:40
[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.3-1.fc23
2016-07-02 19:34:44
[SECURITY] Fedora 24 Update: php-pecl-zip-1.13.3-1.fc24
2016-07-02 15:45:20
thn
thn
PornHub Pays Hackers $20,000 to Find Zero-day Flaws in its Website
2016-07-24 20:25:00
threatpost
threatpost
Pornhub Hack Earns Researchers $22,000
2016-07-25 13:01:30
debian
debian
[SECURITY] [DSA 3618-1] php5 security update
2016-07-14 19:50:00
[SECURITY] [DLA 628-1] php5 security update
2016-09-18 15:12:08
exploitpack
exploitpack
exploitdb
exploitdb
mageia
mageia
Updated php packages fix security vulnerability
2016-07-05 18:47:08
suse
suse
Security update for php53 (important)
2018-03-26 15:08:04
Security update for php5 (important)
2016-07-07 18:08:23
packetstorm
packetstorm
f5
f5
SOL35799130 - Multiple PHP vulnerabilities
2016-10-11 00:00:00
K35799130 : Multiple PHP vulnerabilities
2016-10-11 00:00:00
slackware
slackware
[slackware-security] php
2016-06-24 23:46:10
freebsd
freebsd
php -- multiple vulnerabilities
2016-06-23 00:00:00
amazon
amazon
Medium: php55, php56
2016-08-01 13:30:00
osv
osv
php5 - security update
2016-09-18 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-08-02 00:00:00
cloudfoundry
cloudfoundry
USN-3045-1 PHP vulnerabilities | Cloud Foundry
2016-09-09 00:00:00
apple
apple
About the security content of macOS Sierra 10.12 - Apple Support
2017-01-23 05:36:06
About the security content of macOS Sierra 10.12
2016-09-20 00:00:00
veracode
veracode
Out-Of-Bounds Read
2019-05-02 06:02:24
Arbitrary Code Execution
2019-05-02 06:02:23
Denial Of Service (DoS)
2019-05-02 06:02:21
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45