CVE

Id
93115  
CVE No.
CVE-2016-6295  
Status
Candidate  
Description
ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773.  
Phase
Assigned (20160724)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792670 93115 CVE-2016-6295 MLIST:[oss-security] 20160724 Re: Fwd: CVE for PHP 5.5.38 issues  View
792671 93115 CVE-2016-6295 URL:http://openwall.com/lists/oss-security/2016/07/24/2  View
792672 93115 CVE-2016-6295 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=cab1c3b3708eead315e033359d07049b23b147a3  View
792673 93115 CVE-2016-6295 CONFIRM:http://php.net/ChangeLog-5.php  View
792674 93115 CVE-2016-6295 CONFIRM:http://php.net/ChangeLog-7.php  View
792675 93115 CVE-2016-6295 CONFIRM:https://bugs.php.net/72479  View
792676 93115 CVE-2016-6295 CONFIRM:https://support.apple.com/HT207170  View
792677 93115 CVE-2016-6295 APPLE:APPLE-SA-2016-09-20  View
792678 93115 CVE-2016-6295 URL:http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html  View
792679 93115 CVE-2016-6295 BID:92094  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5389 JVNDB-2016-006162 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin のデータベース 権限チェックおよび "パーティションの削除" 機能には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-6608 93115 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006162.html  View