CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
8.1 | $0-$5k | 0.00 |
A vulnerability was found in PHP 7.0.0 (Programming Language Software) and classified as critical. This issue affects the function xml/filter_url/addcslashe
. The manipulation with an unknown input leads to a numeric error vulnerability. Using CWE to declare the problem leads to CWE-189. Impacted is confidentiality, integrity, and availability.
The weakness was presented 04/28/2016 as confirmed mailinglist post (oss-sec). It is possible to read the advisory at seclists.org. The identification of this vulnerability is CVE-2016-4344 since 04/28/2016. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit.
The vulnerability scanner Nessus provides a plugin with the ID 90009 (PHP 7.0.x < 7.0.4 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CGI abuses and running in the context r.
Upgrading to version 7.0.3 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (112804) and Tenable (90009). See 80326, 80327, 81387 and 83181 for similar entries.
Product
Type
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 8.5VulDB Meta Temp Score: 8.1
VulDB Base Score: 7.3
VulDB Temp Score: 6.4
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 9.8
NVD Vector: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Numeric errorCWE: CWE-189
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 90009
Nessus Name: PHP 7.0.x < 7.0.4 Multiple Vulnerabilities
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 63578
OpenVAS Name: PHP Multiple Vulnerabilities - 02 - Jul16 (Linux)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Upgrade: PHP 7.0.3
Timeline
03/03/2016 🔍03/17/2016 🔍
04/28/2016 🔍
04/28/2016 🔍
05/03/2016 🔍
05/21/2016 🔍
07/27/2022 🔍
Sources
Product: php.orgAdvisory: 71637
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2016-4344 (🔍)
X-Force: 112804 - PHP xml/filter_url/addcslashes buffer overflow
See also: 🔍
Entry
Created: 05/03/2016 12:50Updated: 07/27/2022 23:23
Changes: 05/03/2016 12:50 (72), 11/08/2018 10:58 (2), 07/27/2022 23:23 (5)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.