CVE-2016-9137 in PHP
摘要 (英语)
Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
预定
2016-11-01
披露
2017-01-04
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 95036 | PHP CURLFile curl_file.c 内存损坏 | 416 | 未定义 | 官方修复 | CVE-2016-9137 |