2 matches found
DEBIAN-CVE-2016-7398
A type confusion vulnerability in the mergeparam function of phphttpparams.c in PHP's pecl-http extension 3.1.0beta2 PHP 7 and earlier as well as 2.6.0beta2 PHP 5 and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests...
9.8CVSS9.2AI score0.06797EPSS
SaveExploits1References1
PT-2019-7841
Name of the Vulnerable Software and Affected Versions pecl-http extension versions 3.1.0beta2 and earlier PHP 7 pecl-http extension versions 2.6.0beta2 and earlier PHP 5 Description A type confusion issue in the merge param function of php http params.c allows attackers to crash PHP and possibly...
9.8CVSS0.06797EPSS
SaveExploits1References17
20