CVE-2016-5769

Removed by vendor...

UBUNTU-CVE-2016-5769

Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted length value,...

Internet Bug Bounty: Heap Overflow Due To Integer Overflow

Bug reported : https://bugs.php.net/bug.php?id=72455 PHPFUNCTIONmdecryptgeneric snip int blocksize, datasize; // signed int / Check blocksize / if mcryptencisblockmodepm-td == 1 / It's a block algorithm / blocksize = mcryptencgetblocksizepm-td; datasize = intdatalen - 1 / blocksize + 1 blocksize;...