CVE-2016-4538 The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the zero, o...
CriticalCVSS 9.8
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the zero, one, or two global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 5.5.33 | No fix listed |
| PHP | = 5.6.0 | No fix listed |
| PHP | = 5.6.1 | No fix listed |
| PHP | = 5.6.2 | No fix listed |
| PHP | = 5.6.3 | No fix listed |
| PHP | = 5.6.4 | No fix listed |
| PHP | = 5.6.5 | No fix listed |
| PHP | = 5.6.6 | No fix listed |
| PHP | = 5.6.7 | No fix listed |
| PHP | = 5.6.8 | No fix listed |
| PHP | = 5.6.9 | No fix listed |
| PHP | = 5.6.10 | No fix listed |
| PHP | = 5.6.11 | No fix listed |
| PHP | = 5.6.12 | No fix listed |
| PHP | = 5.6.13 | No fix listed |
| PHP | = 5.6.14 | No fix listed |
| PHP | = 5.6.15 | No fix listed |
| PHP | = 5.6.16 | No fix listed |
| PHP | = 5.6.17 | No fix listed |
| PHP | = 5.6.18 | No fix listed |
| PHP | = 5.6.19 | No fix listed |
| PHP | = 5.6.20 | No fix listed |
| PHP | = 7.0.0 | No fix listed |
| PHP | = 7.0.1 | No fix listed |
| PHP | = 7.0.2 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 7.0.3 | No fix listed |
| PHP | = 7.0.4 | No fix listed |
| PHP | = 7.0.5 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
References
- FEDORA-2016-f4e73663f4 vendor-advisory
- openSUSE-SU-2016:1357 vendor-advisory
- openSUSE-SU-2016:1524 vendor-advisory
- php.net patch
- php.net patch
- RHSA-2016:2750 vendor-advisory
- DSA-3602 vendor-advisory
- [oss-security] 20160505 CVE Request: PHP: several issues fixed with 7.0.6, 5.6.21 and 5.5.35 mailing-list
- 90173 vdb-entry
- bugs.php.net exploit
- git.php.net
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- GLSA-201611-22 vendor-advisory