Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2016-10159 — HIGH severity vulnerability | Release Alert

CVE-2016-10159

7.5

HIGHCVSS v3

Published

January 24, 2017

CVSS v2

5 MEDIUM

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.

GitHubThe PHP Interpreter

NVD

NPMAllows you to run PHP code in Node.js in various ways.

<= 5.6.29, >= 7.0.0, < 7.0.15, = 7.1.0NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Handle some of the strange standards in PHP projects

<= 5.6.29, >= 7.0.0, < 7.0.15, = 7.1.0NVD