Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-5769
7.5
HIGHCVSS v2
Published
August 7, 2016
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions.
GitHub
php
NPMAllows you to run PHP code in Node.js in various ways.
NPMAllows you to run PHP code in Node.js in various ways.= 5.6.1, = 5.6.0, = 5.6.5, = 7.0.4, = 5.6.12, = 5.6.13, = 5.6.4, = 7.0.7, = 5.6.15, = 7.0.1, = 7.0.2, = 5.6.17, = 5.6.18, = 7.0.3, = 5.6.10, = 5.6.11, = 5.6.2, = 5.6.6, = 5.6.7, = 5.6.20, = 5.6.21, = 7.0.0, = 5.6.16, = 5.6.22, = 5.6.3, <= 5.5.36, = 5.6.19, = 7.0.5, = 7.0.6, = 5.6.14, = 5.6.8, = 5.6.9NVD
