Description
An improper unserialize implementation in ext/standard/var.c was found in PHP 7.x before 7.0.14. By exploiting this vulnerability malicious users can cause a denial of service. Other unspecified impacts are also possible. This vulnerability can be exploited remotely via specially designed serialized data.
Technical details
This vulnerability is a consequence of an incomplete fix for CVE-2015-6834.
Original advisories
Related products
CVE list
- CVE-2016-9936 critical
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!