Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-3078
HistoryAug 07, 2016 - 10:59 a.m.

CVE-2016-3078

2016-08-0710:59:02
CWE-190
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.344 Low

EPSS

Percentile

97.1%

JSON

Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class.

Affected configurations

NVD
Node
phpphpRange7.0.0–7.0.6

Related

debiancve 1
myhack58 2
prion 1
ubuntucve 1
cvelist 1
openvas 5
zdt 1
packetstorm 1
cve 1
exploitpack 1
checkpoint_advisories 1
f5 2
exploitdb 1
fedora 2
nessus 6
ubuntu 1
rosalinux 1
debiancve
debiancve
CVE-2016-3078
2016-08-07 10:59:00
myhack58
myhack58
Safety warning: PHP zip component integer overflow remote command execution-vulnerability warning-the black bar safety net
2016-05-09 00:00:00
CVE-2016-3078 PHP ZipArchive Integer Overflow analysis-vulnerability warning-the black bar safety net
2017-03-15 00:00:00
prion
prion
Integer overflow
2016-08-07 10:59:00
ubuntucve
ubuntucve
CVE-2016-3078
2016-04-29 00:00:00
cvelist
cvelist
CVE-2016-3078
2016-08-07 10:00:00
openvas
openvas
PHP Denial of Service Vulnerability - 01 (Aug 2016) - Windows
2016-08-17 00:00:00
PHP Denial of Service Vulnerability - 01 (Aug 2016) - Linux
2016-08-17 00:00:00
Fedora Update for php-pecl-zip FEDORA-2016-79ac80a0d5
2016-07-10 00:00:00
zdt
zdt
PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow
2016-04-28 00:00:00
packetstorm
packetstorm
PHP 7.x Heap Overflow
2016-04-28 00:00:00
cve
cve
CVE-2016-3078
2016-08-07 10:59:02
exploitpack
exploitpack
PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow
2016-04-28 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP ZIP Archive Heap Overflow (CVE-2016-3078)
2016-05-03 00:00:00
f5
f5
SOL56138200 - PHP vulnerability CVE-2016-3078
2016-05-24 00:00:00
K56138200 : PHP vulnerability CVE-2016-3078
2016-05-24 00:00:00
exploitdb
exploitdb
PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow
2016-04-28 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.3-1.fc23
2016-07-02 19:34:44
[SECURITY] Fedora 24 Update: php-pecl-zip-1.13.3-1.fc24
2016-07-02 15:45:20
nessus
nessus
Fedora 24 : php-pecl-zip (2016-79ac80a0d5)
2016-07-15 00:00:00
PHP 7.0.x < 7.0.6 Multiple Vulnerabilities
2019-01-09 00:00:00
Fedora 23 : php-pecl-zip (2016-4f3c77ef90)
2016-07-15 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-05-24 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.344 Low

EPSS

Percentile

97.1%

JSON
Related for NVD:CVE-2016-3078
debiancve1myhack582prion1ubuntucve1cvelist1openvas5zdt1packetstorm1cve1exploitpack1checkpoint_advisories1f52exploitdb1fedora2nessus6ubuntu1rosalinux1