Lucene search

K
redhatcveRedhat.comRH:CVE-2016-7124
HistoryApr 08, 2020 - 5:15 p.m.

CVE-2016-7124

2020-04-0817:15:47
redhat.com
access.redhat.com
19

0.028 Low

EPSS

Percentile

90.6%

ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that leads to a (1) __destruct call or (2) magic method call.