Skip to content

CVE-2016-2554 Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have....

CriticalCVSS 9.8 EPSS 11.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

Affected products

ProductAffected versionsFixed in
PHP = 7.0.0 No fix listed
PHP = 7.0.1 No fix listed
PHP = 7.0.2 No fix listed
PHP <= 5.5.31 No fix listed
PHP = 5.6.0-alpha1 No fix listed
PHP = 5.6.0-alpha2 No fix listed
PHP = 5.6.0-alpha3 No fix listed
PHP = 5.6.0-alpha4 No fix listed
PHP = 5.6.0-alpha5 No fix listed
PHP = 5.6.0-beta1 No fix listed
PHP = 5.6.0-beta2 No fix listed
PHP = 5.6.0-beta3 No fix listed
PHP = 5.6.0-beta4 No fix listed
PHP = 5.6.1 No fix listed
PHP = 5.6.2 No fix listed
PHP = 5.6.3 No fix listed
PHP = 5.6.4 No fix listed
PHP = 5.6.5 No fix listed
PHP = 5.6.6 No fix listed
PHP = 5.6.7 No fix listed
PHP = 5.6.8 No fix listed
PHP = 5.6.9 No fix listed
PHP = 5.6.10 No fix listed
PHP = 5.6.11 No fix listed
PHP = 5.6.12 No fix listed
Show 5 more
ProductAffected versionsFixed in
PHP = 5.6.13 No fix listed
PHP = 5.6.14 No fix listed
PHP = 5.6.15 No fix listed
PHP = 5.6.16 No fix listed
PHP = 5.6.17 No fix listed

References