Lucene search
PRIOn knowledge basePRION:CVE-2016-7418HistorySep 17, 2016 - 9:59 p.m.
Design/Logic Flaw
2016-09-1721:59:00
PRIOn knowledge base
www.prio-n.com
6
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
References
www.openwall.com/lists/oss-security/2016/09/15/10
www.php.net/ChangeLog-5.php
www.php.net/ChangeLog-7.php
www.securityfocus.com/bid/93011
www.securitytracker.com/id/1036836
access.redhat.com/errata/RHSA-2018:1296
bugs.php.net/bug.php?id=73065
github.com/php/php-src/commit/c4cca4c20e75359c9a13a1f9a36cb7b4e9601d29?w=1
security.gentoo.org/glsa/201611-22
www.tenable.com/security/tns-2016-19
Related
hackerone
hackerone
redhatcve
redhatcve
CVE-2016-7418
2016-09-19 13:48:34
cve
cve
CVE-2016-7418
2016-09-17 21:59:10
cvelist
cvelist
CVE-2016-7418
2016-09-17 21:00:00
veracode
veracode
Out Of Bound Reads (OOB)
2019-05-16 02:59:58
Use After Free
2019-05-16 02:59:58
alpinelinux
alpinelinux
CVE-2016-7418
2016-09-17 21:59:10
nvd
nvd
CVE-2016-7418
2016-09-17 21:59:10
ubuntucve
ubuntucve
CVE-2016-7418
2016-09-17 00:00:00
debiancve
debiancve
CVE-2016-7418
2016-09-17 21:59:00
nessus
nessus
PHP 7.0.x < 7.0.11 Multiple Vulnerabilities
2019-01-09 00:00:00
Amazon Linux AMI : php70 (ALAS-2016-754)
2016-10-13 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities - 03 (Sep 2016) - Windows
2016-09-12 00:00:00
PHP Multiple Vulnerabilities - 03 (Sep 2016) - Linux
2016-09-12 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-754)
2016-10-26 00:00:00
amazon
amazon
Medium: php70
2016-10-12 17:00:00
Medium: php56
2016-10-12 17:00:00
freebsd
freebsd
PHP -- multiple vulnerabilities
2016-09-15 00:00:00
PHP -- multiple vulnerabilities
2016-09-16 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: php-5.6.26-1.fc23
2016-09-28 04:52:34
[SECURITY] Fedora 24 Update: php-5.6.26-1.fc24
2016-09-27 03:58:11
suse
suse
Security update for php5 (important)
2016-10-04 16:10:25
Security update for php5 (important)
2016-10-14 16:11:34
Security update for php5 (important)
2016-10-07 21:12:50
slackware
slackware
[slackware-security] php
2016-09-23 23:31:48
mageia
mageia
Updated php packages fix security vulnerabilities
2016-09-25 18:45:31
archlinux
archlinux
php: multiple issues
2016-09-18 00:00:00
ibm
ibm
osv
osv
php5 - security update
2016-12-16 00:00:00
debian
debian
[SECURITY] [DLA 749-1] php5 security update
2016-12-16 21:48:18
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
cloudfoundry
cloudfoundry
USN-3095-1 PHP vulnerabilities | Cloud Foundry
2016-10-04 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-10-04 00:00:00
redhat
redhat
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
apple
apple
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45