Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2016-4544HistoryMay 22, 2016 - 1:59 a.m.
CVE-2016-4544
2016-05-2201:59:00
Debian Security Bug Tracker
security-tracker.debian.org
22
EPSS
0.014
Percentile
86.4%
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | php7.0 | < 7.0.33-0+deb9u8 | php7.0_7.0.33-0+deb9u8_all.deb |
Related
cve
cve
CVE-2016-4544
2016-05-22 01:59:29
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:02:22
Denial Of Service (DoS)
2019-05-02 06:02:18
Denial Of Service (DoS)
2019-05-02 06:02:23
cvelist
cvelist
CVE-2016-4544
2016-05-22 01:00:00
prion
prion
Out-of-bounds
2016-05-22 01:59:00
nvd
nvd
CVE-2016-4544
2016-05-22 01:59:29
ubuntucve
ubuntucve
CVE-2016-4544
2016-05-06 00:00:00
f5
f5
nessus
nessus
Fedora 24 : php-5.6.21-1.fc24 (2016-f4e73663f4)
2016-05-09 00:00:00
PHP 5.5.x < 5.5.35 Multiple Vulnerabilities
2016-05-05 00:00:00
PHP 5.6.x < 5.6.21 Multiple Vulnerabilities
2016-05-05 00:00:00
openvas
openvas
PHP < 5.5.35, 5.6.x < 5.6.21, 7.0.x < 7.0.6 Multiple Vulnerabilities (Jul 2016) - Linux
2016-07-14 00:00:00
PHP < 5.5.35, 5.6.x < 5.6.21, 7.0.x < 7.0.6 Multiple Vulnerabilities (Jul 2016) - Windows
2016-07-14 00:00:00
Fedora Update for php FEDORA-2016-e205218629
2016-06-08 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: php-5.6.21-1.fc22
2016-05-12 07:24:40
[SECURITY] Fedora 24 Update: php-5.6.21-1.fc24
2016-05-07 12:29:10
debian
debian
[SECURITY] [DSA 3602-1] php5 security update
2016-06-14 15:43:55
[SECURITY] [DSA 3602-1] php5 security update
2016-06-14 15:43:55
[SECURITY] [DLA 499-1] php5 security update
2016-05-31 20:07:56
osv
osv
php5 - security update
2016-05-31 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-05-24 00:00:00
ibm
ibm
suse
suse
Security update for php53 (important)
2016-06-14 20:07:58
Security update for php53 (important)
2016-06-21 13:08:17
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
redhat
redhat