CVE-2016-7412

🗓️ 17 Sep 2016 21:00:00Reported by mitreType

PHP versions 5.6.26 and 7.x before 7.0.11 do not verify BIT field unsigned_flag, leading to potential buffer overflow via crafted field metadata

Reporter	Title	Published	Views	Family All 103
Prion	Heap overflow	17 Sep 201621:59	–	prion
UbuntuCve	CVE-2016-7412	17 Sep 201600:00	–	ubuntucve
AlpineLinux	CVE-2016-7412	17 Sep 201621:59	–	alpinelinux
RedhatCVE	CVE-2016-7412	19 Sep 201612:48	–	redhatcve
Hacker One	Internet Bug Bounty: Heap overflow in mysqlnd related to BIT fields (CVE-2016-7412)	17 Oct 201612:11	–	hackerone
CVE	CVE-2016-7412	17 Sep 201621:59	–	cve
Veracode	Heap-Based Buffer Overflow	16 May 201902:59	–	veracode
Veracode	Use After Free	16 May 201902:59	–	veracode
NVD	CVE-2016-7412	17 Sep 201621:59	–	nvd
Debian CVE	CVE-2016-7412	17 Sep 201621:59	–	debiancve

Source	Link
tenable	www.tenable.com/security/tns-2016-19
securitytracker	www.securitytracker.com/id/1036836
security	www.security.gentoo.org/glsa/201611-22
php	www.php.net/ChangeLog-7.php
securityfocus	www.securityfocus.com/bid/93005
github	www.github.com/php/php-src/commit/28f80baf3c53e267c9ce46a2a0fadbb981585132
bugs	www.bugs.php.net/bug.php
openwall	www.openwall.com/lists/oss-security/2016/09/15/10
php	www.php.net/ChangeLog-5.php
access	www.access.redhat.com/errata/RHSA-2018:1296

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Sep 2016 21:00Current

9.1High risk

Vulners AI Score9.1

EPSS0.016