CVE

Id
93951  
CVE No.
CVE-2016-7131  
Status
Candidate  
Description
ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a tag that lacks a < (less than) character.  
Phase
Assigned (20160902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794957 93951 CVE-2016-7131 MLIST:[oss-security] 20160902 Re: CVE assignment for PHP 5.6.25 and 7.0.10 - and libcurl  View
794958 93951 CVE-2016-7131 URL:http://openwall.com/lists/oss-security/2016/09/02/9  View
794959 93951 CVE-2016-7131 CONFIRM:http://www.php.net/ChangeLog-5.php  View
794960 93951 CVE-2016-7131 CONFIRM:http://www.php.net/ChangeLog-7.php  View
794961 93951 CVE-2016-7131 CONFIRM:https://bugs.php.net/bug.php?id=72790  View
794962 93951 CVE-2016-7131 CONFIRM:https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1  View
794963 93951 CVE-2016-7131 BID:92768  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4227 JVNDB-2016-005000 GnuTLS の lib/x509/ocsp.c の gnutls_ocsp_resp_check_crt 関数における証明書検証メカニズムを回避される脆弱性 GnuTLS の lib/x509/ocsp.c の gnutls_ocsp_resp_check_crt 関数 は、OCSP レスポンスのシリアルの長さを検証しないため、証明書検証メカニズムを回避される脆弱性が存在します。 CVE-2016-7444 93951 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005000.html  View