CVE

Id
91914  
CVE No.
CVE-2016-5095  
Status
Candidate  
Description
Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094.  
Phase
Assigned (20160526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
787736 91914 CVE-2016-5095 MLIST:[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues  View
787737 91914 CVE-2016-5095 URL:http://www.openwall.com/lists/oss-security/2016/05/26/3  View
787738 91914 CVE-2016-5095 CONFIRM:http://php.net/ChangeLog-5.php  View
787739 91914 CVE-2016-5095 CONFIRM:https://bugs.php.net/bug.php?id=72135  View
787740 91914 CVE-2016-5095 CONFIRM:https://gist.github.com/8ef775c117d84ff15185953990a28576  View
787741 91914 CVE-2016-5095 DEBIAN:DSA-3602  View
787742 91914 CVE-2016-5095 URL:http://www.debian.org/security/2016/dsa-3602  View
787743 91914 CVE-2016-5095 BID:92144  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3624 JVNDB-2016-004397 Red Hat Enterprise Linux の squid パッケージの cachemgr.cgi の munge_other_line 関数におけるスタックベースのバッファオーバーフローの脆弱性 Red Hat Enterprise Linux の squid パッケージの cachemgr.cgi の munge_other_line 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-5408 91914 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004397.html  View