Skip to content

CVE-2016-5114 sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information....

CriticalCVSS 9.1 EPSS 4.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging.

Affected products

ProductAffected versionsFixed in
PHP <= 5.5.30 No fix listed
PHP = 5.6.0-alpha1 No fix listed
PHP = 5.6.0-alpha2 No fix listed
PHP = 5.6.0-alpha3 No fix listed
PHP = 5.6.0-alpha4 No fix listed
PHP = 5.6.0-alpha5 No fix listed
PHP = 5.6.0-beta1 No fix listed
PHP = 5.6.0-beta2 No fix listed
PHP = 5.6.0-beta3 No fix listed
PHP = 5.6.0-beta4 No fix listed
PHP = 5.6.1 No fix listed
PHP = 5.6.2 No fix listed
PHP = 5.6.3 No fix listed
PHP = 5.6.4 No fix listed
PHP = 5.6.5 No fix listed
PHP = 5.6.6 No fix listed
PHP = 5.6.7 No fix listed
PHP = 5.6.8 No fix listed
PHP = 5.6.9 No fix listed
PHP = 5.6.10 No fix listed
PHP = 5.6.11 No fix listed
PHP = 5.6.12 No fix listed
PHP = 5.6.13 No fix listed
PHP = 5.6.14 No fix listed
PHP = 5.6.15 No fix listed
Show 3 more
ProductAffected versionsFixed in
PHP = 5.6.16 No fix listed
PHP = 7.0.0 No fix listed
PHP = 7.0.1 No fix listed

References