CVE

Id
91912  
CVE No.
CVE-2016-5093  
Status
Candidate  
Description
The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a "" character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.  
Phase
Assigned (20160526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
787717 91912 CVE-2016-5093 MLIST:[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues  View
787718 91912 CVE-2016-5093 URL:http://www.openwall.com/lists/oss-security/2016/05/26/3  View
787719 91912 CVE-2016-5093 CONFIRM:http://php.net/ChangeLog-5.php  View
787720 91912 CVE-2016-5093 CONFIRM:http://php.net/ChangeLog-7.php  View
787721 91912 CVE-2016-5093 CONFIRM:https://bugs.php.net/bug.php?id=72241  View
787722 91912 CVE-2016-5093 CONFIRM:https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484?w=1  View
787723 91912 CVE-2016-5093 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
787724 91912 CVE-2016-5093 DEBIAN:DSA-3602  View
787725 91912 CVE-2016-5093 URL:http://www.debian.org/security/2016/dsa-3602  View
787726 91912 CVE-2016-5093 BID:90946  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4242 JVNDB-2016-005015 Red Hat JBoss Enterprise Application Platform のドメインコントローラにおける権限を取得される脆弱性 Red Hat JBoss Enterprise Application Platform (EAP) のドメインコントローラには、権限を取得される脆弱性が存在します。 CVE-2016-5406 91912 6.5 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005015.html  View