CVE

Id
92693  
CVE No.
CVE-2016-5873  
Status
Candidate  
Description
Buffer overflow in the HTTP URL parsing functions in pecl_http before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL.  
Phase
Assigned (20160629)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
791555 92693 CVE-2016-5873 MLIST:[oss-security] 20160629 CVE Request - PECL-HTTP 3.0.0 Buffer overflow  View
791556 92693 CVE-2016-5873 URL:http://www.openwall.com/lists/oss-security/2016/06/29/1  View
791557 92693 CVE-2016-5873 MLIST:[oss-security] 20160629 Re: CVE Request - PECL-HTTP 3.0.0 Buffer overflow  View
791558 92693 CVE-2016-5873 URL:http://www.openwall.com/lists/oss-security/2016/06/29/4  View
791559 92693 CVE-2016-5873 CONFIRM:https://bugs.php.net/bug.php?id=71719  View
791560 92693 CVE-2016-5873 CONFIRM:https://github.com/m6w6/ext-http/commit/3724cd76a28be1d6049b5537232e97ac  View
791561 92693 CVE-2016-5873 CONFIRM:https://pecl.php.net/package/pecl_http/3.0.1  View
791562 92693 CVE-2016-5873 BID:95863  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3391 JVNDB-2016-004164 Django の contrib/admin/static/admin/js/admin/RelatedObjectLookups.js におけるクロスサイトスクリプティングの脆弱性 Django の contrib/admin/static/admin/js/admin/RelatedObjectLookups.js の dismissChangeRelatedObjectPopup 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-6186 92693 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004164.html  View