CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-2554 — HIGH severity vulnerability | Release Alert
CVE-2016-2554
10
HIGHCVSS v2
Published
May 16, 2016
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.