cbcvebase.
CVE-2016-5771
published 2016-08-07

CVE-2016-5771: spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection…

PriorityP352critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
15.48%
96.4th percentile
spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.

Affected

8 ranges
VendorProductVersion rangeFixed in
applemacos_sierra
debiandebian_linux
opensuseleap
opensuseopensuse
phpphp< 5.5.375.5.37
phpphp>= 5.6.0 < 5.6.235.6.23
phpphp>= 7.0.0 < 7.0.87.0.8
php5php5>= 0 < 5.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.19

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_redhat9.8CRITICAL
vendor_ubuntu9.8CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.