CVE

Id
95957  
CVE No.
CVE-2016-9137  
Status
Candidate  
Description
Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.  
Phase
Assigned (20161101)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799661 95957 CVE-2016-9137 MLIST:[oss-security] 20161101 Re: CVE assignment for PHP 5.6.27 and 7.0.12  View
799662 95957 CVE-2016-9137 URL:http://www.openwall.com/lists/oss-security/2016/11/01/2  View
799663 95957 CVE-2016-9137 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=0e6fe3a4c96be2d3e88389a5776f878021b4c59f  View
799664 95957 CVE-2016-9137 CONFIRM:http://www.php.net/ChangeLog-5.php  View
799665 95957 CVE-2016-9137 CONFIRM:http://www.php.net/ChangeLog-7.php  View
799666 95957 CVE-2016-9137 CONFIRM:https://bugs.php.net/bug.php?id=73147  View
799667 95957 CVE-2016-9137 BID:93577  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5269 JVNDB-2016-006042 Drupal のユーザパスワードのリセットフォームにおけるキャッシュポイズニング攻撃を実行される脆弱性 Drupal のユーザパスワードのリセットフォームには、キャッシュポイズニング攻撃を実行される脆弱性が存在します。 CVE-2016-9450 95957 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006042.html  View