Lucene search
HannoH1:200909HistoryJan 24, 2017 - 8:38 p.m.
Internet Bug Bounty: Out of bounds memory read in unserialize()
2017-01-2420:38:29
hanno
hackerone.com
$500
38
0.036 Low
EPSS
Percentile
91.7%
I have found and reported an out of bounds memory read in PHP:
https://bugs.php.net/bug.php?id=73825
It affected all three supported versions and has been fixed with the latest updates:
https://secure.php.net/ChangeLog-5.php#5.6.30
https://secure.php.net/ChangeLog-7.php#7.0.15
https://secure.php.net/ChangeLog-7.php#7.1.1
Related
nvd
nvd
CVE-2016-10161
2017-01-24 21:59:00
cve
cve
CVE-2016-10161
2017-01-24 21:59:00
osv
osv
CVE-2016-10161
2017-01-24 21:59:00
php5 - security update
2017-02-08 00:00:00
php5 - security update
2017-02-07 00:00:00
veracode
veracode
Buffer Over-Read
2019-05-16 02:59:57
Use After Free
2019-05-16 02:59:58
ubuntucve
ubuntucve
CVE-2016-10161
2017-01-24 00:00:00
prion
prion
Design/Logic Flaw
2017-01-24 21:59:00
cvelist
cvelist
CVE-2016-10161
2017-01-24 21:00:00
debiancve
debiancve
CVE-2016-10161
2017-01-24 21:59:00
redhatcve
redhatcve
CVE-2016-10161
2017-02-03 12:49:27
ibm
ibm
openvas
openvas
Debian Security Advisory DSA 3783-1 (php5 - security update)
2017-02-08 00:00:00
Mageia: Security Advisory (MGASA-2017-0040)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3783-1)
2017-02-07 00:00:00
nessus
nessus
PHP 5.6.x < 5.6.30 Multiple DoS
2019-01-09 00:00:00
Debian DSA-3783-1 : php5 - security update
2017-02-09 00:00:00
GLSA-201702-29 : PHP: Multiple vulnerabilities
2017-02-21 00:00:00
debian
debian
[SECURITY] [DSA 3783-1] php5 security update
2017-02-09 02:28:30
[SECURITY] [DSA 3783-1] php5 security update
2017-02-09 02:28:30
[SECURITY] [DLA 818-1] php5 security update
2017-02-07 16:25:20
mageia
mageia
Updated php packages fix security vulnerabilities
2017-02-04 21:41:12
gentoo
gentoo
PHP: Multiple vulnerabilities
2017-02-21 00:00:00
amazon
amazon
Medium: php56
2017-03-28 23:30:00
Medium: php70
2017-03-29 20:15:00
slackware
slackware
[slackware-security] php
2017-02-10 20:41:10
suse
suse
Security update for php53 (important)
2017-02-27 18:08:46
Security update for php5 (important)
2017-02-23 15:08:17
Security update for php7 (important)
2017-03-02 15:12:04
ubuntu
ubuntu
PHP vulnerabilities
2017-02-14 00:00:00
PHP regression
2017-03-02 00:00:00
PHP vulnerabilities
2017-02-23 00:00:00
cloudfoundry
cloudfoundry
Multiple PHP vulnerabilities | Cloud Foundry
2017-03-17 00:00:00
redhat
redhat
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
apple
apple
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45