Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-4342
8.3
HIGHCVSS v2
Published
May 22, 2016
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive.
php
NPMAllows you to run PHP code in Node.js in various ways.
NPMAllows you to run PHP code in Node.js in various ways.= 5.6.1, = 5.6.5, = 5.6.12, = 5.6.13, = 5.6.0, = 5.6.4, = 5.6.6, = 7.0.1, = 5.6.11, = 5.6.14, = 7.0.0, = 5.6.17, = 5.6.10, = 5.6.9, = 5.6.2, = 5.6.16, = 5.6.15, = 5.6.8, = 5.6.7, <= 5.5.31, = 7.0.2, = 5.6.3NVD
phpPython Package IndexHandle some of the strange standards in PHP projects
Python Package IndexHandle some of the strange standards in PHP projects= 5.6.1, = 5.6.5, = 5.6.12, = 5.6.13, = 5.6.0, = 5.6.4, = 5.6.6, = 7.0.1, = 5.6.11, = 5.6.14, = 7.0.0, = 5.6.17, = 5.6.10, = 5.6.9, = 5.6.2, = 5.6.16, = 5.6.15, = 5.6.8, = 5.6.7, <= 5.5.31, = 7.0.2, = 5.6.3NVD