CVE-2016-4343
EUVD-2016-534322.05.2016, 01:59
The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| php | php | 𝑥 < 5.5.36 |
| php | php | 5.6.0 ≤ 𝑥 < 5.6.18 |
| php | php | 7.0.0 ≤ 𝑥 < 7.0.3 |
| opensuse | opensuse | 13.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References