Denial of service vulnerability in PHP

Описание

An improper unserialize implementation in ext/standard/var.c was found in PHP 7.x before 7.0.14. By exploiting this vulnerability malicious users can cause a denial of service. Other unspecified impacts are also possible. This vulnerability can be exploited remotely via specially designed serialized data.

---

Technical details

This vulnerability is a consequence of an incomplete fix for CVE-2015-6834.

Первичный источник обнаружения

• PHP 7 ChangeLog
  

Связанные продукты

• PHP

Список CVE

• CVE-2016-9936
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com