Vulnerability Description
php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | <= 5.5.36 |
Related Weaknesses (CWE)
References
- http://github.com/php/php-src/commit/f6aef68089221c5ea047d4a74224ee3deead99a6?w=
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html
- http://php.net/ChangeLog-5.phpPatchRelease Notes
- http://php.net/ChangeLog-7.phpPatchRelease Notes
- http://rhn.redhat.com/errata/RHSA-2016-2750.html
- http://www.debian.org/security/2016/dsa-3618
- http://www.openwall.com/lists/oss-security/2016/06/23/4Release Notes
- http://www.securityfocus.com/bid/91397
- https://bugs.php.net/bug.php?id=72434ExploitVendor Advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c
- https://support.apple.com/HT207170
- http://github.com/php/php-src/commit/f6aef68089221c5ea047d4a74224ee3deead99a6?w=
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html
FAQ
What is CVE-2016-5773?
CVE-2016-5773 is a vulnerability with a CVSS score of 9.8 (CRITICAL). php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote atta...
How severe is CVE-2016-5773?
CVE-2016-5773 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-5773?
Check the references section above for vendor advisories and patch information. Affected products include: Php Php.