CVE

Id
93949  
CVE No.
CVE-2016-7129  
Status
Candidate  
Description
The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document.  
Phase
Assigned (20160902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794943 93949 CVE-2016-7129 MLIST:[oss-security] 20160902 Re: CVE assignment for PHP 5.6.25 and 7.0.10 - and libcurl  View
794944 93949 CVE-2016-7129 URL:http://openwall.com/lists/oss-security/2016/09/02/9  View
794945 93949 CVE-2016-7129 CONFIRM:http://www.php.net/ChangeLog-5.php  View
794946 93949 CVE-2016-7129 CONFIRM:http://www.php.net/ChangeLog-7.php  View
794947 93949 CVE-2016-7129 CONFIRM:https://bugs.php.net/bug.php?id=72749  View
794948 93949 CVE-2016-7129 CONFIRM:https://github.com/php/php-src/commit/426aeb2808955ee3d3f52e0cfb102834cdb836a5?w=1  View
794949 93949 CVE-2016-7129 BID:92758  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4324 JVNDB-2016-005097 Sophos UTM ファームウェアの Frontend コンポーネントにおける重要なパスワード情報を取得される脆弱性 Sophos UTM ファームウェアの Frontend コンポーネントには、重要なパスワード情報を取得される脆弱性が存在します。 CVE-2016-7442 93949 2.1 4.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005097.html  View