2 matches found
PHP ext/standard var_unserializer Heap Buffer Overflow DoS
The vulnerability of the ext/standard/varunserializer.re component in the PHP programming language arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or potentially have other effects through unserialized calls that reference partially...
10CVSS8AI score0.05649EPSS
SaveExploits1References8Affected Software3
UBUNTU-CVE-2016-7411
ext/standard/varunserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via an unserialize call that references a partially constructed object...
9.8CVSS7.2AI score0.05649EPSS
SaveExploits1References5
20