CVE-2016-10712

En PHP, en versiones anteriores a la 5.5.32, versiones 5.6.x anteriores a la 5.6.18 y versiones 7.x anteriores a la 7.0.3, todos los valores de retorno de stream_get_meta_data pueden controlarse si se puede controlar la entrada (por ejemplo, durante la subida de archivos). Por ejemplo, una llamada "$uri = stream_get_meta_data(fopen($file, "r"))['uri']" gestiona de manera incorrecta el caso en el que $file es data:text/plain;uri=eviluri, -- en otras palabras, un atacante puede establecer metadatos.

USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information or possibly cause a crash, resulting in a denial of service. Various other issues were also addressed.