Логотип exploitDog
bind:"CVE-2016-5399" OR bind:"CVE-2016-5767" OR bind:"CVE-2016-5768" OR bind:"CVE-2016-5766"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2016-5399" OR bind:"CVE-2016-5767" OR bind:"CVE-2016-5768" OR bind:"CVE-2016-5766"

Количество 39

Количество 39

oracle-oval логотип

ELSA-2016-2598

больше 8 лет назад

ELSA-2016-2598: php security and bug fix update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:2080-1

почти 9 лет назад

Security update for php5

EPSS: Низкий
ubuntu логотип

CVE-2016-5399

около 8 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
EPSS: Средний
redhat логотип

CVE-2016-5399

почти 9 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 8.1
EPSS: Средний
nvd логотип

CVE-2016-5399

около 8 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
EPSS: Средний
debian логотип

CVE-2016-5399

около 8 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x befor ...

CVSS3: 7.8
EPSS: Средний
suse-cvrf логотип

openSUSE-SU-2016:1922-1

почти 9 лет назад

Security update for php5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:1842-1

почти 9 лет назад

Security update for php5

EPSS: Низкий
github логотип

GHSA-3wxp-gf5c-jh8g

около 3 лет назад

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
EPSS: Средний
fstec логотип

BDU:2022-02544

около 8 лет назад

Уязвимость функции bzread (ext/bz2/bz2.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS3: 8.8
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2016:2013-1

почти 9 лет назад

Security update for php53

EPSS: Низкий
ubuntu логотип

CVE-2016-5767

почти 9 лет назад

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2016-5767

почти 9 лет назад

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 5.6
EPSS: Низкий
nvd логотип

CVE-2016-5767

почти 9 лет назад

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2016-5767

почти 9 лет назад

Integer overflow in the gdImageCreate function in gd.c in the GD Graph ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-8h88-m6m2-5756

около 3 лет назад

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 8.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:2210-1

почти 9 лет назад

Security update for php53

EPSS: Низкий
ubuntu логотип

CVE-2016-5768

почти 9 лет назад

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS3: 9.8
EPSS: Средний
redhat логотип

CVE-2016-5768

почти 9 лет назад

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS3: 3.7
EPSS: Средний
nvd логотип

CVE-2016-5768

почти 9 лет назад

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS3: 9.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
oracle-oval логотип
ELSA-2016-2598

ELSA-2016-2598: php security and bug fix update (MODERATE)

больше 8 лет назад
suse-cvrf логотип
SUSE-SU-2016:2080-1

Security update for php5

почти 9 лет назад
ubuntu логотип
CVE-2016-5399

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
19%
Средний
около 8 лет назад
redhat логотип
CVE-2016-5399

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 8.1
19%
Средний
почти 9 лет назад
nvd логотип
CVE-2016-5399

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
19%
Средний
около 8 лет назад
debian логотип
CVE-2016-5399

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x befor ...

CVSS3: 7.8
19%
Средний
около 8 лет назад
suse-cvrf логотип
openSUSE-SU-2016:1922-1

Security update for php5

почти 9 лет назад
suse-cvrf логотип
SUSE-SU-2016:1842-1

Security update for php5

почти 9 лет назад
github логотип
GHSA-3wxp-gf5c-jh8g

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

CVSS3: 7.8
19%
Средний
около 3 лет назад
fstec логотип
BDU:2022-02544

Уязвимость функции bzread (ext/bz2/bz2.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS3: 8.8
19%
Средний
около 8 лет назад
suse-cvrf логотип
SUSE-SU-2016:2013-1

Security update for php53

почти 9 лет назад
ubuntu логотип
CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 8.8
5%
Низкий
почти 9 лет назад
redhat логотип
CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 5.6
5%
Низкий
почти 9 лет назад
nvd логотип
CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 8.8
5%
Низкий
почти 9 лет назад
debian логотип
CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graph ...

CVSS3: 8.8
5%
Низкий
почти 9 лет назад
github логотип
GHSA-8h88-m6m2-5756

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS3: 8.8
5%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2016:2210-1

Security update for php53

почти 9 лет назад
ubuntu логотип
CVE-2016-5768

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS3: 9.8
17%
Средний
почти 9 лет назад
redhat логотип
CVE-2016-5768

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS3: 3.7
17%
Средний
почти 9 лет назад
nvd логотип
CVE-2016-5768

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS3: 9.8
17%
Средний
почти 9 лет назад

Уязвимостей на страницу