CVE-2016-10161

5

MEDIUMCVSS v2

Published

January 24, 2017

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.

php/php-src

GitHubThe PHP Interpreter

NVD

php

NPMAllows you to run PHP code in Node.js in various ways.

= 7.1.0, = 7.0.11, = 7.0.4, <= 5.6.29, = 7.0.3, = 7.0.1, = 7.0.12, = 7.0.13, = 7.0.7, = 7.0.10, = 7.0.5, = 7.0.6, = 7.0.14, = 7.0.2, = 7.0.0, = 7.0.8, = 7.0.9NVD

php

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Handle some of the strange standards in PHP projects

= 7.1.0, = 7.0.11, = 7.0.4, <= 5.6.29, = 7.0.3, = 7.0.1, = 7.0.12, = 7.0.13, = 7.0.7, = 7.0.10, = 7.0.5, = 7.0.6, = 7.0.14, = 7.0.2, = 7.0.0, = 7.0.8, = 7.0.9NVD

Security Advisories

CVE-2016-10161

Description

More on this CVE