CVE

Id
90889  
CVE No.
CVE-2016-4070  
Status
Candidate  
Description
** DISPUTED ** Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service (application crash) via a long string to the rawurlencode function. NOTE: the vendor says "Not sure if this qualifies as security issue (probably not)."  
Phase
Assigned (20160423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
782212 90889 CVE-2016-4070 MLIST:[oss-security] 20160423 Re: CVE request: PHP issues fixed in 7.0.5, 5.6.20 and 5.5.34 releases  View
782213 90889 CVE-2016-4070 URL:http://www.openwall.com/lists/oss-security/2016/04/24/1  View
782214 90889 CVE-2016-4070 CONFIRM:http://www.php.net/ChangeLog-5.php  View
782215 90889 CVE-2016-4070 CONFIRM:http://www.php.net/ChangeLog-7.php  View
782216 90889 CVE-2016-4070 CONFIRM:https://bugs.php.net/bug.php?id=71798  View
782217 90889 CVE-2016-4070 CONFIRM:https://git.php.net/?p=php-src.git;a=commit;h=95433e8e339dbb6b5d5541473c1661db6ba2c451  View
782218 90889 CVE-2016-4070 CONFIRM:https://support.apple.com/HT206567  View
782219 90889 CVE-2016-4070 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
782220 90889 CVE-2016-4070 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149  View
782221 90889 CVE-2016-4070 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722  View
782222 90889 CVE-2016-4070 APPLE:APPLE-SA-2016-05-16-4  View
782223 90889 CVE-2016-4070 URL:http://lists.apple.com/archives/security-announce/2016/May/msg00004.html  View
782224 90889 CVE-2016-4070 DEBIAN:DSA-3560  View
782225 90889 CVE-2016-4070 URL:http://www.debian.org/security/2016/dsa-3560  View
782226 90889 CVE-2016-4070 SUSE:SUSE-SU-2016:1277  View
782227 90889 CVE-2016-4070 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html  View
782228 90889 CVE-2016-4070 SUSE:openSUSE-SU-2016:1274  View
782229 90889 CVE-2016-4070 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html  View
782230 90889 CVE-2016-4070 SUSE:openSUSE-SU-2016:1373  View
782231 90889 CVE-2016-4070 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html  View
782232 90889 CVE-2016-4070 UBUNTU:USN-2952-1  View
782233 90889 CVE-2016-4070 URL:http://www.ubuntu.com/usn/USN-2952-1  View
782234 90889 CVE-2016-4070 UBUNTU:USN-2952-2  View
782235 90889 CVE-2016-4070 URL:http://www.ubuntu.com/usn/USN-2952-2  View
782236 90889 CVE-2016-4070 BID:85801  View

Related JVN