9.8

CVE-2016-5771

Exploit
spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version < 5.5.37
Php ≫ Php Version >= 5.6.0 < 5.6.23
Php ≫ Php Version >= 7.0.0 < 7.0.8
Opensuse ≫ Leap Version42.1
Opensuse ≫ Opensuse Version13.2
Debian ≫ Debian Linux Version8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.48% 0.964
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://php.net/ChangeLog-5.php
Patch
Vendor Advisory
Release Notes
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2750.html
Third Party Advisory
http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
Broken Link
Mailing List
https://support.apple.com/HT207170
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2016/06/23/4
Patch
Third Party Advisory
Mailing List
http://www.debian.org/security/2016/dsa-3618
Third Party Advisory
http://github.com/php/php-src/commit/3f627e580acfdaf0595ae3b115b8bec677f203ee?w=1
Patch
Third Party Advisory
http://www.securityfocus.com/bid/91401
Third Party Advisory
VDB Entry
https://bugs.php.net/bug.php?id=72433
Vendor Advisory
Exploit
Issue Tracking