CVE-2016-7416 ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attac...
HighCVSS 7.5
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 5.6.25 | No fix listed |
| PHP | = 7.0.0 | No fix listed |
| PHP | = 7.0.1 | No fix listed |
| PHP | = 7.0.2 | No fix listed |
| PHP | = 7.0.3 | No fix listed |
| PHP | = 7.0.4 | No fix listed |
| PHP | = 7.0.5 | No fix listed |
| PHP | = 7.0.6 | No fix listed |
| PHP | = 7.0.7 | No fix listed |
| PHP | = 7.0.8 | No fix listed |
| PHP | = 7.0.9 | No fix listed |
| PHP | = 7.0.10 | No fix listed |
| alpine/php(Alpine:v3.2) | < 5.6.27-r0 | 5.6.27-r0 |
| alpine/php(Alpine:v3.3) | < 5.6.27-r0 | 5.6.27-r0 |
References
- [oss-security] 20160915 Re: CVE assignment for PHP 5.6.26 and 7.0.11 mailing-list
- www.php.net release-notes
- www.php.net release-notes
- 93008 vdb-entry
- 1036836 vdb-entry
- RHSA-2018:1296 vendor-advisory
- bugs.php.net exploit issue-tracking
- github.com issue-tracking patch
- GLSA-201611-22 vendor-advisory
- www.tenable.com
- security.alpinelinux.org vendor-advisory