CVSS: 9.8EPSS: 78%CPEs: 11EXPL: 1CVE-2016-7124 – php: bypass __wakeup() in deserialization of an unexpected object
https://notcve.org/view.php?id=CVE-2016-7124
12 Sep 2016 — ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that leads to a (1) __destruct call or (2) magic method call. ext/standard/var_unserializer.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 no maneja adecuadamente ciertos objetos no válidos, lo que permite a atacantes remotos provocar una... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-502: Deserialization of Untrusted Data •
CVSS: 7.5EPSS: 1%CPEs: 11EXPL: 1CVE-2016-7125 – php: Session Data Injection Vulnerability
https://notcve.org/view.php?id=CVE-2016-7125
10 Sep 2016 — ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection. ext/session/session.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 omite nombres de sesión no válidos de una manera que desencadena un análisis gramatical incorrecto, lo que permite a atacantes rem... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 9.8EPSS: 9%CPEs: 11EXPL: 1CVE-2016-7126 – php: select_colors write out-of-bounds
https://notcve.org/view.php?id=CVE-2016-7126
10 Sep 2016 — The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument. La función imagetruecolortopalette en ext/gd/gd.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 no valida adecuadamente el número de col... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 3%CPEs: 11EXPL: 1CVE-2016-7127 – php: imagegammacorrect allows arbitrary write access
https://notcve.org/view.php?id=CVE-2016-7127
10 Sep 2016 — The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments. La función imagetruecolortopalette en ext/gd/gd.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 no valida adecuadamente los valores de gama, lo que permite a ata... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-787: Out-of-bounds Write •
CVSS: 5.3EPSS: 1%CPEs: 11EXPL: 1CVE-2016-7128 – php: Memory Leakage In exif_process_IFD_in_TIFF
https://notcve.org/view.php?id=CVE-2016-7128
10 Sep 2016 — The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image. La función exif_process_IFD_in_TIFF en ext/exif/exif.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 no maneja correctamente el caso de desplazamientos en miniatura que exceden el tamaño de archivo, lo... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 3%CPEs: 11EXPL: 1CVE-2016-7129 – php: wddx_deserialize allows illegal memory access
https://notcve.org/view.php?id=CVE-2016-7129
10 Sep 2016 — The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document. La función php_wddx_process_data en ext/wddx/wddx.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 permite a atacantes remo... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 5%CPEs: 11EXPL: 1CVE-2016-7130 – php: wddx_deserialize null dereference
https://notcve.org/view.php?id=CVE-2016-7130
10 Sep 2016 — The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document. La función php_wddx_pop_element en ext/wddx/wddx.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 ... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 13%CPEs: 11EXPL: 1CVE-2016-7131 – php: wddx_deserialize null dereference with invalid xml
https://notcve.org/view.php?id=CVE-2016-7131
10 Sep 2016 — ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a tag that lacks a < (less than) character. ext/wddx/wddx.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 permite a atacantes remotos provocar una denegación de servicio ... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 13%CPEs: 11EXPL: 1CVE-2016-7132 – php: wddx_deserialize null dereference in php_wddx_pop_element
https://notcve.org/view.php?id=CVE-2016-7132
10 Sep 2016 — ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a stray element inside a boolean element, leading to incorrect pop processing. ext/wddx/wddx.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 permite a atacantes remotos pr... • http://openwall.com/lists/oss-security/2016/09/02/9 • CWE-476: NULL Pointer Dereference •
CVSS: 9.1EPSS: 0%CPEs: 28EXPL: 1CVE-2016-5114 – php: out-of-bounds write in fpm_log.c
https://notcve.org/view.php?id=CVE-2016-5114
02 Aug 2016 — sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging. sapi/fpm/fpm/fpm_log.c en PHP en versiones anteriores a 5.5.31, 5.6.x en versiones anteriores a 5.6.17 y 7.x en versiones... • http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •