CVE-2016-6289

🗓️ 25 Jul 2016 14:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 30 Views

Integer overflow in virtual_file_ex function in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service or have unspecified other impact via a crafted extract operation on a ZIP archive

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple php vulnerabilities	18 Jun 201801:33	–	ibm
Tenable Nessus	PHP 5.5.x < 5.5.38 / 5.6.x < 5.6.24 / 7.0.x < 7.0.9 Multiple Vulnerabilities	5 Aug 201600:00	–	nessus
Tenable Nessus	Mac OS X 10.x < 10.12 Multiple Vulnerabilities	21 Oct 201600:00	–	nessus
Tenable Nessus	Debian DLA-628-1 : php5 security update	19 Sep 201600:00	–	nessus
Tenable Nessus	Debian DSA-3631-1 : php5 - security update (httpoxy)	27 Jul 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1795)	23 Aug 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-1865)	17 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : php (EulerOS-SA-2019-1928)	17 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : php (EulerOS-SA-2019-2043)	24 Sep 201900:00	–	nessus

25 Jul 2016 14:00Current

8.7High risk

Vulners AI Score8.7

CVSS 26.8

CVSS 37.8

EPSS0.03792