CVE

Id
93114  
CVE No.
CVE-2016-6294  
Status
Candidate  
Description
The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument.  
Phase
Assigned (20160724)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792660 93114 CVE-2016-6294 MLIST:[oss-security] 20160724 Re: Fwd: CVE for PHP 5.5.38 issues  View
792661 93114 CVE-2016-6294 URL:http://openwall.com/lists/oss-security/2016/07/24/2  View
792662 93114 CVE-2016-6294 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4  View
792663 93114 CVE-2016-6294 CONFIRM:http://php.net/ChangeLog-5.php  View
792664 93114 CVE-2016-6294 CONFIRM:http://php.net/ChangeLog-7.php  View
792665 93114 CVE-2016-6294 CONFIRM:https://bugs.php.net/72533  View
792666 93114 CVE-2016-6294 CONFIRM:https://support.apple.com/HT207170  View
792667 93114 CVE-2016-6294 APPLE:APPLE-SA-2016-09-20  View
792668 93114 CVE-2016-6294 URL:http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html  View
792669 93114 CVE-2016-6294 BID:92115  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5388 JVNDB-2016-006161 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin の以下には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-6607 93114 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006161.html  View