CVE-2016-5768

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
phpphp
𝑥
≤ 5.5.36
phpphp
5.6.0:alpha1
phpphp
5.6.0:alpha2
phpphp
5.6.0:alpha3
phpphp
5.6.0:alpha4
phpphp
5.6.0:alpha5
phpphp
5.6.0:beta1
phpphp
5.6.0:beta2
phpphp
5.6.0:beta3
phpphp
5.6.0:beta4
phpphp
5.6.1
phpphp
5.6.2
phpphp
5.6.3
phpphp
5.6.4
phpphp
5.6.5
phpphp
5.6.6
phpphp
5.6.7
phpphp
5.6.8
phpphp
5.6.9
phpphp
5.6.10
phpphp
5.6.11
phpphp
5.6.12
phpphp
5.6.13
phpphp
5.6.14
phpphp
5.6.15
phpphp
5.6.16
phpphp
5.6.17
phpphp
5.6.18
phpphp
5.6.19
phpphp
5.6.20
phpphp
5.6.21
phpphp
5.6.22
phpphp
7.0.0
phpphp
7.0.1
phpphp
7.0.2
phpphp
7.0.3
phpphp
7.0.4
phpphp
7.0.5
phpphp
7.0.6
phpphp
7.0.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
php5
precise
not-affected
trusty
Fixed 5.5.9+dfsg-1ubuntu4.19
released
wily
ignored
xenial
dne
php7.0
precise
dne
trusty
dne
wily
dne
xenial
Fixed 7.0.8-0ubuntu0.16.04.1
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
php
RHEL 7
0:5.4.16-42.el7
fixed
php-bcmath
RHEL 7
0:5.4.16-42.el7
fixed
php-cli
RHEL 7
0:5.4.16-42.el7
fixed
php-common
RHEL 7
0:5.4.16-42.el7
fixed
php-dba
RHEL 7
0:5.4.16-42.el7
fixed
php-devel
RHEL 7
0:5.4.16-42.el7
fixed
php-embedded
RHEL 7
0:5.4.16-42.el7
fixed
php-enchant
RHEL 7
0:5.4.16-42.el7
fixed
php-fpm
RHEL 7
0:5.4.16-42.el7
fixed
php-gd
RHEL 7
0:5.4.16-42.el7
fixed
php-intl
RHEL 7
0:5.4.16-42.el7
fixed
php-ldap
RHEL 7
0:5.4.16-42.el7
fixed
php-mbstring
RHEL 7
0:5.4.16-42.el7
fixed
php-mysql
RHEL 7
0:5.4.16-42.el7
fixed
php-mysqlnd
RHEL 7
0:5.4.16-42.el7
fixed
php-odbc
RHEL 7
0:5.4.16-42.el7
fixed
php-pdo
RHEL 7
0:5.4.16-42.el7
fixed
php-pgsql
RHEL 7
0:5.4.16-42.el7
fixed
php-process
RHEL 7
0:5.4.16-42.el7
fixed
php-pspell
RHEL 7
0:5.4.16-42.el7
fixed
php-recode
RHEL 7
0:5.4.16-42.el7
fixed
php-snmp
RHEL 7
0:5.4.16-42.el7
fixed
php-soap
RHEL 7
0:5.4.16-42.el7
fixed
php-xml
RHEL 7
0:5.4.16-42.el7
fixed
php-xmlrpc
RHEL 7
0:5.4.16-42.el7
fixed