CVE

Id
93108  
CVE No.
CVE-2016-6288  
Status
Candidate  
Description
The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.  
Phase
Assigned (20160724)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792605 93108 CVE-2016-6288 MLIST:[oss-security] 20160724 Re: Fwd: CVE for PHP 5.5.38 issues  View
792606 93108 CVE-2016-6288 URL:http://openwall.com/lists/oss-security/2016/07/24/2  View
792607 93108 CVE-2016-6288 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=629e4da7cc8b174acdeab84969cbfc606a019b31  View
792608 93108 CVE-2016-6288 CONFIRM:http://php.net/ChangeLog-5.php  View
792609 93108 CVE-2016-6288 CONFIRM:https://bugs.php.net/70480  View
792610 93108 CVE-2016-6288 CONFIRM:https://support.apple.com/HT207170  View
792611 93108 CVE-2016-6288 APPLE:APPLE-SA-2016-09-20  View
792612 93108 CVE-2016-6288 URL:http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html  View
792613 93108 CVE-2016-6288 BID:92111  View

Related JVN