Логотип exploitDog
bind:"BDU:2022-02538" OR bind:"CVE-2016-5773"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2022-02538" OR bind:"CVE-2016-5773"

Количество 9

Количество 9

fstec логотип

BDU:2022-02538

почти 9 лет назад

Уязвимость компонента php_zip.c интерпретатора языка программирования PHP , позволяющая нарушителю выполнить произвольный PHP-код или вызвать отказ в обслуживании

CVSS3: 9.8
EPSS: Средний
ubuntu логотип

CVE-2016-5773

почти 9 лет назад

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 9.8
EPSS: Средний
redhat логотип

CVE-2016-5773

почти 9 лет назад

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 5.6
EPSS: Средний
nvd логотип

CVE-2016-5773

почти 9 лет назад

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 9.8
EPSS: Средний
debian логотип

CVE-2016-5773

почти 9 лет назад

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6. ...

CVSS3: 9.8
EPSS: Средний
github логотип

GHSA-7w96-3v7r-6g9j

около 3 лет назад

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 9.8
EPSS: Средний
suse-cvrf логотип

openSUSE-SU-2016:3095-1

больше 8 лет назад

Security update for php5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:2975-1

больше 8 лет назад

Security update for php5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:0806-1

около 7 лет назад

Security update for php53

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2022-02538

Уязвимость компонента php_zip.c интерпретатора языка программирования PHP , позволяющая нарушителю выполнить произвольный PHP-код или вызвать отказ в обслуживании

CVSS3: 9.8
13%
Средний
почти 9 лет назад
ubuntu логотип
CVE-2016-5773

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 9.8
13%
Средний
почти 9 лет назад
redhat логотип
CVE-2016-5773

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 5.6
13%
Средний
почти 9 лет назад
nvd логотип
CVE-2016-5773

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 9.8
13%
Средний
почти 9 лет назад
debian логотип
CVE-2016-5773

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6. ...

CVSS3: 9.8
13%
Средний
почти 9 лет назад
github логотип
GHSA-7w96-3v7r-6g9j

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS3: 9.8
13%
Средний
около 3 лет назад
suse-cvrf логотип
openSUSE-SU-2016:3095-1

Security update for php5

больше 8 лет назад
suse-cvrf логотип
SUSE-SU-2016:2975-1

Security update for php5

больше 8 лет назад
suse-cvrf логотип
SUSE-SU-2018:0806-1

Security update for php53

около 7 лет назад

Уязвимостей на страницу