CVE

Id
93116  
CVE No.
CVE-2016-6296  
Status
Candidate  
Description
Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.  
Phase
Assigned (20160724)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792680 93116 CVE-2016-6296 MLIST:[oss-security] 20160724 Re: Fwd: CVE for PHP 5.5.38 issues  View
792681 93116 CVE-2016-6296 URL:http://openwall.com/lists/oss-security/2016/07/24/2  View
792682 93116 CVE-2016-6296 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=e6c48213c22ed50b2b987b479fcc1ac709394caa  View
792683 93116 CVE-2016-6296 CONFIRM:http://php.net/ChangeLog-5.php  View
792684 93116 CVE-2016-6296 CONFIRM:http://php.net/ChangeLog-7.php  View
792685 93116 CVE-2016-6296 CONFIRM:https://bugs.php.net/72606  View
792686 93116 CVE-2016-6296 CONFIRM:https://support.apple.com/HT207170  View
792687 93116 CVE-2016-6296 APPLE:APPLE-SA-2016-09-20  View
792688 93116 CVE-2016-6296 URL:http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html  View
792689 93116 CVE-2016-6296 UBUNTU:USN-3059-1  View
792690 93116 CVE-2016-6296 URL:http://www.ubuntu.com/usn/USN-3059-1  View
792691 93116 CVE-2016-6296 BID:92095  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5480 JVNDB-2016-006253 phpMyAdmin の配列エクスポート機能における任意の PHP コマンドを実行される脆弱性 phpMyAdmin の配列エクスポート機能には、任意の PHP コマンドを実行される脆弱性が存在します。 CVE-2016-6609 93116 6.5 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006253.html  View