Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-5399

Опубликовано: 21 апр. 2017
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 6.8
CVSS3: 7.8

Описание

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

5.5.9+dfsg-1ubuntu4.19
precise

released

5.3.10-1ubuntu3.24
trusty

released

5.5.9+dfsg-1ubuntu4.19
trusty/esm

not-affected

5.5.9+dfsg-1ubuntu4.19
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
devel

released

7.0.8-3ubuntu2
esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

7.0.8-0ubuntu0.16.04.2
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

7.0.9
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

Показывать по

EPSS

Процентиль: 95%
0.18733
Средний

6.8 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
почти 9 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
nvd
около 8 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
debian
около 8 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x befor ...

CVSS3: 7.8
github
около 3 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 8.8
fstec
около 8 лет назад

Уязвимость функции bzread (ext/bz2/bz2.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 95%
0.18733
Средний

6.8 Medium

CVSS2

7.8 High

CVSS3

Уязвимость CVE-2016-5399