Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-3132

Опубликовано: 07 авг. 2016
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 7.5
CVSS3: 9.8

Описание

Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

php-7.0 only
precise

not-affected

php-7.0 only
trusty

not-affected

php-7.0 only
trusty/esm

not-affected

php-7.0 only
upstream

not-affected

php-7.0 only
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

not-affected

php-7.0 only
xenial

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

7.0.8-3ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

7.0.4-7ubuntu2.1
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

7.0.6-1
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

Показывать по

EPSS

Процентиль: 95%
0.18675
Средний

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

redhat
больше 9 лет назад

Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index.

CVSS3: 9.8
nvd
около 9 лет назад

Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index.

CVSS3: 9.8
debian
около 9 лет назад

Double free vulnerability in the SplDoublyLinkedList::offsetSet functi ...

CVSS3: 9.8
github
около 3 лет назад

Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index.

EPSS

Процентиль: 95%
0.18675
Средний

7.5 High

CVSS2

9.8 Critical

CVSS3