3 matches found
SUSE CVE-2016-7411
ext/standard/varunserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via an unserialize call that references a partially constructed object...
ALPINE-CVE-2016-7411
ext/standard/varunserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via an unserialize call that references a partially constructed object...
PT-2016-3383
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.26 Description The issue is related to the mishandling of object-deserialization failures in the ext/standard/var unserializer.re component of PHP. This could allow remote attackers to cause a denial of service memory...