CVE-2016-10161MEDIUM
Description
The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.
References
http://php.net/ChangeLog-5.php
http://php.net/ChangeLog-7.php
http://www.debian.org/security/2017/dsa-3783
http://www.securityfocus.com/bid/95768
http://www.securitytracker.com/id/1037659
https://access.redhat.com/errata/RHSA-2018:1296
https://bugs.php.net/bug.php?id=73825
https://github.com/php/php-src/commit/16b3003ffc6393e250f069aa28a78dc5a2c064b2
https://security.gentoo.org/glsa/201702-29
Details
Source: MITRE
Published: 2017-01-24
Updated: 2018-05-04
Type: CWE-125
Risk Information
CVSS v2.0
Base Score: 5
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 10
Severity: MEDIUM
CVSS v3.0
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 3.9
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:php:php:*:*:*:*:*:*:*:* versions up to 5.6.29 (inclusive)
cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 137966 | EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747) | Nessus | Huawei Local Security Checks | critical |
| 132184 | EulerOS 2.0 SP3 : php (EulerOS-SA-2019-2649) | Nessus | Huawei Local Security Checks | critical |
| 130683 | EulerOS 2.0 SP5 : php (EulerOS-SA-2019-2221) | Nessus | Huawei Local Security Checks | critical |
| 98856 | PHP 7.1.x < 7.1.1 Multiple Vulnerabilities | Web Application Scanning | Component Vulnerability | high |
| 98839 | PHP 7.0.x < 7.0.15 Multiple Vulnerabilities | Web Application Scanning | Component Vulnerability | high |
| 98821 | PHP 5.6.x < 5.6.30 Multiple DoS | Web Application Scanning | Component Vulnerability | high |
| 119994 | SUSE SLES12 Security Update : php5 (SUSE-SU-2017:0556-1) | Nessus | SuSE Local Security Checks | high |
| 119993 | SUSE SLES12 Security Update : php7 (SUSE-SU-2017:0534-1) | Nessus | SuSE Local Security Checks | high |
| 101050 | Tenable SecurityCenter PHP < 5.6.30 Multiple Vulnerabilities (TNS-2017-04) | Nessus | Misc. | high |
| 99134 | macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy) | Nessus | MacOS X Local Security Checks | critical |
| 99039 | Amazon Linux AMI : php70 (ALAS-2017-812) | Nessus | Amazon Linux Local Security Checks | high |
| 99035 | Amazon Linux AMI : php56 (ALAS-2017-808) | Nessus | Amazon Linux Local Security Checks | high |
| 97726 | Tenable SecurityCenter 5.x < 5.4.3 Multiple Vulnerabilities (TNS-2017-04) (httpoxy) | Nessus | Misc. | medium |
| 97563 | openSUSE Security Update : php7 (openSUSE-2017-304) | Nessus | SuSE Local Security Checks | high |
| 97521 | Ubuntu 16.04 LTS / 16.10 : php7.0 regression (USN-3211-2) | Nessus | Ubuntu Local Security Checks | high |
| 97431 | SUSE SLES11 Security Update : php53 (SUSE-SU-2017:0568-1) | Nessus | SuSE Local Security Checks | high |
| 97384 | Ubuntu 16.04 LTS / 16.10 : php7.0 vulnerabilities (USN-3211-1) | Nessus | Ubuntu Local Security Checks | high |
| 97272 | GLSA-201702-29 : PHP: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 97190 | Ubuntu 12.04 LTS / 14.04 LTS : php5 vulnerabilities (USN-3196-1) | Nessus | Ubuntu Local Security Checks | high |
| 97103 | Slackware 14.0 / 14.1 / 14.2 / current : php (SSA:2017-041-03) | Nessus | Slackware Local Security Checks | high |
| 97068 | Debian DSA-3783-1 : php5 - security update | Nessus | Debian Local Security Checks | high |
| 97052 | Debian DLA-818-1 : php5 security update | Nessus | Debian Local Security Checks | critical |
| 9938 | PHP 7.0.x < 7.0.15 / 7.1.x < 7.1.1 Multiple Vulnerabilities | Nessus Network Monitor | Web Servers | critical |
| 96801 | PHP 7.1.x < 7.1.1 Multiple Vulnerabilities | Nessus | CGI abuses | high |
| 96800 | PHP 7.0.x < 7.0.15 Multiple Vulnerabilities | Nessus | CGI abuses | high |
| 96799 | PHP 5.6.x < 5.6.30 Multiple DoS | Nessus | CGI abuses | high |
| 9937 | PHP 5.6.x < 5.6.30 Multiple Vulnerabilities | Nessus Network Monitor | Web Servers | high |