Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-9934

Опубликовано: 04 янв. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

5.5.9+dfsg-1ubuntu4.21
precise

released

5.3.10-1ubuntu3.26
trusty

released

5.5.9+dfsg-1ubuntu4.21
trusty/esm

not-affected

5.5.9+dfsg-1ubuntu4.21
upstream

released

5.6.28
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

7.0.14-2ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

7.0.13-0ubuntu0.16.04.1
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

7.0.13
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

7.0.13-0ubuntu0.16.04.1

Показывать по

EPSS

Процентиль: 90%
0.05793
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
больше 9 лет назад

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

CVSS3: 7.5
nvd
больше 8 лет назад

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

CVSS3: 7.5
debian
больше 8 лет назад

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remo ...

CVSS3: 7.5
github
около 3 лет назад

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

CVSS3: 7.5
fstec
больше 8 лет назад

Уязвимость компонента ext/wddx/wddx.c интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 90%
0.05793
Низкий

5 Medium

CVSS2

7.5 High

CVSS3