ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773.

References

bugzilla.redhat.com/show_bug.cgi?id=1359815

cve 2

debiancve 2

ubuntucve 2

prion 2

openvas 22

redhatcve 1

f5 3

nessus 40

fedora 3

threatpost 1

thn 1

packetstorm 1

suse 6

exploitdb 1

mageia 2

exploitpack 1

debian 3

slackware 1

osv 1

freebsd 2

amazon 1

cloudfoundry 1

ubuntu 1

ibm 1

apple 2

veracode 57

redhat 1

gentoo 1

rosalinux 1

oracle 1

cve

CVE-2016-6295

2016-07-25 14:59:00

CVE-2016-5773

2016-08-07 10:59:00

debiancve

CVE-2016-6295

2016-07-25 14:59:00

CVE-2016-5773

2016-08-07 10:59:00

ubuntucve

CVE-2016-6295

2016-07-25 00:00:00

CVE-2016-5773

2016-06-24 00:00:00

prion

Design/Logic Flaw

2016-07-25 14:59:00

Design/Logic Flaw

2016-08-07 10:59:00

openvas

Fedora Update for php-pecl-zip FEDORA-2016-b08d0b00fc

2016-07-10 00:00:00

Fedora Update for php-pecl-zip FEDORA-2016-79ac80a0d5

2016-07-10 00:00:00

Fedora Update for php-pecl-zip FEDORA-2016-4f3c77ef90

2016-07-10 00:00:00

redhatcve

CVE-2016-5773

2016-06-29 12:18:26

K29691966 : PHP vulnerability CVE-2016-5773

2016-12-22 00:00:00

K35799130 : Multiple PHP vulnerabilities

2016-10-11 00:00:00

SOL35799130 - Multiple PHP vulnerabilities

2016-10-11 00:00:00

nessus

Fedora 22 : php-pecl-zip (2016-b08d0b00fc)

2016-07-15 00:00:00

openSUSE Security Update : php5 (openSUSE-2016-1449)

2016-12-13 00:00:00

Fedora 24 : php-pecl-zip (2016-79ac80a0d5)

2016-07-15 00:00:00

fedora

[SECURITY] Fedora 22 Update: php-pecl-zip-1.12.5-2.fc22

2016-07-02 19:28:40

[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.3-1.fc23

2016-07-02 19:34:44

[SECURITY] Fedora 24 Update: php-pecl-zip-1.13.3-1.fc24

2016-07-02 15:45:20

threatpost

Pornhub Hack Earns Researchers $22,000

2016-07-25 13:01:30

thn

PornHub Pays Hackers $20,000 to Find Zero-day Flaws in its Website

2016-07-24 20:25:00

packetstorm

Kerio Control Unified Threat Management Code Execution / XSS / Memory Corruption

2016-09-22 00:00:00

suse

Security update for php53 (important)

2018-03-26 15:08:04

Security update for php5 (important)

2016-07-07 18:08:23

Security update for php5 (important)

2016-10-04 17:11:09

exploitdb

Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities

2016-09-22 00:00:00

mageia

Updated php packages fix security vulnerability

2016-07-05 18:47:08

Updated php/xmlrpc-epi/timezone packages fix security vulnerability

2016-07-27 00:59:16

exploitpack

Kerio Control Unified Threat Management 9.1.0 build 10879.1.1 build 1324 - Multiple Vulnerabilities

2016-09-22 00:00:00

debian

[SECURITY] [DSA 3618-1] php5 security update

2016-07-14 19:50:00

[SECURITY] [DLA 628-1] php5 security update

2016-09-18 15:12:08

[SECURITY] [DSA 3631-1] php5 security update

2016-07-26 20:46:29

slackware

[slackware-security] php

2016-06-24 23:46:10

osv

php5 - security update

2016-09-18 00:00:00

freebsd

php -- multiple vulnerabilities

2016-06-23 00:00:00

php -- multiple vulnerabilities

2016-07-21 00:00:00

amazon

Medium: php55, php56

2016-08-01 13:30:00

cloudfoundry

USN-3045-1 PHP vulnerabilities | Cloud Foundry

2016-09-09 00:00:00

ubuntu

PHP vulnerabilities

2016-08-02 00:00:00

ibm

Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On

2018-06-16 20:06:28

apple

About the security content of macOS Sierra 10.12

2016-09-20 00:00:00

About the security content of macOS Sierra 10.12 - Apple Support

2017-01-23 05:36:06

veracode

Denial Of Service (DoS)

2019-05-02 06:02:21

Denial Of Service (DoS)

2019-05-02 06:02:17

Denial Of Service (DoS)

2019-05-02 06:02:19

redhat

(RHSA-2016:2750) Moderate: rh-php56 security, bug fix, and enhancement update

2016-11-15 11:13:31

gentoo

PHP: Multiple vulnerabilities

2016-11-30 00:00:00

rosalinux

Advisory ROSA-SA-2021-1950

2021-07-02 17:57:45

oracle

Oracle Critical Patch Update Advisory - April 2017

2017-04-18 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for RH:CVE-2016-6295