Lucene search
F5F5:K35232053HistoryNov 15, 2016 - 12:00 a.m.
K35232053 : PHP vulnerability CVE-2016-7125
2016-11-1500:00:00
my.f5.com
19
Security Advisory Description
ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection. (CVE-2016-7125)
Impact
This vulnerability may allow an attacker to control the contents of their PHP session data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.5.5 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 |
Related
f5
f5
SOL35232053 - PHP vulnerability CVE-2016-7125
2016-11-15 00:00:00
ubuntucve
ubuntucve
CVE-2016-7125
2016-09-11 00:00:00
cvelist
cvelist
CVE-2016-7125
2016-09-12 01:00:00
nessus
nessus
F5 Networks BIG-IP : PHP vulnerability (K35232053)
2017-03-02 00:00:00
PHP 5.6.x < 5.6.25 Multiple Vulnerabilities
2016-08-23 00:00:00
Tenable SecurityCenter PHP < 5.6.25 Multiple Vulnerabilities (TNS-2016-09)
2017-06-26 00:00:00
redhatcve
redhatcve
CVE-2016-7125
2016-09-09 13:18:41
debiancve
debiancve
CVE-2016-7125
2016-09-12 01:59:00
prion
prion
Design/Logic Flaw
2016-09-12 01:59:00
nvd
nvd
CVE-2016-7125
2016-09-12 01:59:03
cve
cve
CVE-2016-7125
2016-09-12 01:59:03
ibm
ibm
openvas
openvas
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Linux
2016-09-12 00:00:00
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Windows
2016-09-12 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2337-1)
2016-09-20 00:00:00
suse
suse
Security update for php5 (important)
2016-09-19 19:09:23
Security update for php53 (important)
2016-10-05 18:12:21
Security update for php53 (important)
2016-09-16 21:09:09
slackware
slackware
[slackware-security] php
2016-09-08 22:38:27
cloudfoundry
cloudfoundry
USN-3095-1 PHP vulnerabilities | Cloud Foundry
2016-10-04 00:00:00
debian
debian
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
ubuntu
ubuntu
PHP vulnerabilities
2016-10-04 00:00:00
osv
osv
php5 - security update
2016-09-18 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:02:26
Null Pointer Dereference
2019-05-02 06:02:24
Insecure Pseudo Random Number Generator
2019-05-02 06:02:16
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45