Denial of service vulnerability in PHP

Beschreibung

An improper unserialize implementation in ext/standard/var.c was found in PHP 7.x before 7.0.14. By exploiting this vulnerability malicious users can cause a denial of service. Other unspecified impacts are also possible. This vulnerability can be exploited remotely via specially designed serialized data.

---

Technical details

This vulnerability is a consequence of an incomplete fix for CVE-2015-6834.

Ursprüngliche Informationshinweise

• PHP 7 ChangeLog

CVE Liste

• CVE-2016-9936
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com