CVE-2016-6295
CRITICAL
9.8
CVSS 3.0
Description
ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773.
Affected products and versions
- PHP — Up to and including 5.5.37
- PHP versions 5.6.0alpha1, 5.6.0alpha2, 5.6.0alpha3, 5.6.0alpha4, 5.6.0alpha5, 5.6.0beta1, 5.6.0beta2, 5.6.0beta3, 5.6.0beta4, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8, 5.6.9, 5.6.10, 5.6.11, 5.6.12, 5.6.13, 5.6.14, 5.6.15, 5.6.16, 5.6.17, 5.6.18, 5.6.19, 5.6.20, 5.6.21, 5.6.22, 5.6.23, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.8
References
- git.php.net http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=cab1c3b3708eead315e033359d07049b23b147a3
- lists.apple.com http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- openwall.com http://openwall.com/lists/oss-security/2016/07/24/2 Mailing List, Patch
- php.net http://php.net/ChangeLog-5.php Release Notes
- php.net http://php.net/ChangeLog-7.php Release Notes
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-2750.html
- www.debian.org http://www.debian.org/security/2016/dsa-3631
- www.securityfocus.com http://www.securityfocus.com/bid/92094 Third Party Advisory, VDB Entry
- www.securitytracker.com http://www.securitytracker.com/id/1036430
- bugs.php.net https://bugs.php.net/72479 Exploit, Issue Tracking, Patch, Third Party Advisory
- security.gentoo.org https://security.gentoo.org/glsa/201611-22
- support.apple.com https://support.apple.com/HT207170
- nvd.nist.gov Official NVD record