Denial of service vulnerability in PHP

Beschreibung

An unspecified vulnerability was found in PHP before 5.6.29 and 7.x before 7.0.14. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited remotely via an empty boolean element in a wddxPacket XML document.

---

Technical details

This vulnerability occurs in the php_wddx_push_element function in ext/wddx/wddx.c.

Ursprüngliche Informationshinweise

• PHP 7 ChangeLog

• PHP 5 ChangeLog

CVE Liste

• CVE-2016-9935
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com