CVE-2016-4342 in PHP
요약 (영어)
ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2016. 04. 28.
공개
2016. 05. 21.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 83181 | PHP phar 메모리 손상 | 119 | 정의되지 않음 | 공식 수정 | CVE-2016-4342 |