Vulnerability-Lookup

CVE-2016-10162 (GCVE-0-2016-10162)

Vulnerability from cvelistv5 – Published: 2017-01-24 21:00 – Updated: 2024-08-06 03:14

Summary

The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
http://www.securityfocus.com/bid/95668	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:1296	vendor-advisoryx_refsource_REDHAT
https://github.com/php/php-src/commit/8d2539fa0fa…	x_refsource_CONFIRM
http://php.net/ChangeLog-7.php	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037659	vdb-entryx_refsource_SECTRACK
https://bugs.php.net/bug.php?id=73831	x_refsource_CONFIRM

Date Public

2016-12-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:14:42.320Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95668",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95668"
          },
          {
            "name": "RHSA-2018:1296",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1296"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-7.php"
          },
          {
            "name": "1037659",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=73831"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-03T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "95668",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95668"
        },
        {
          "name": "RHSA-2018:1296",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1296"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-7.php"
        },
        {
          "name": "1037659",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=73831"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10162",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95668",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95668"
            },
            {
              "name": "RHSA-2018:1296",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1296"
            },
            {
              "name": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
            },
            {
              "name": "http://php.net/ChangeLog-7.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-7.php"
            },
            {
              "name": "1037659",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037659"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=73831",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=73831"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10162",
    "datePublished": "2017-01-24T21:00:00.000Z",
    "dateReserved": "2017-01-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T03:14:42.320Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2016-10162",
      "date": "2026-09-16",
      "epss": "0.05879",
      "percentile": "0.92834"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B90B947-7B54-47F3-9637-2F4AC44079EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"35848414-BD5D-4164-84DC-61ABBB1C4152\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B1F8402-8551-4F66-A9A7-81D472AB058E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7A773E8E-48CD-4D35-A0FD-629BD9334486\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FC492340-79AF-4676-A161-079A97EC6F0C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1C2D8FE-C380-4B43-B634-A3DBA4700A71\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EB58393-0C10-413C-8D95-6BAA8BC19A1B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"751F51CA-9D88-4971-A6EC-8C0B72E8E22B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"37B74118-8FC2-44CB-9673-A83DF777B2E6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D56A200-1477-40DA-9444-CFC946157C69\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FD0D1CCC-A857-4C15-899E-08F9255CEE34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6745CC43-2836-4CD8-848F-EEA08AE9D5AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BEB6696-14F9-4D9B-9974-B682FFBB828E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"04146390-021D-4147-9830-9EAA90D120A7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n php_wddx_pop_element en ext/wddx/wddx.c en PHP 7.0.x en versiones anteriores a 7.0.15 y 7.1.x en versiones anteriores a 7.1.1 permite a atacantes remotos provocar una denegaci\\u00f3n de servicio (referencia a puntero NULL y ca\\u00edda de aplicaci\\u00f3n) a trav\\u00e9s de un nombre de clase inaplicable en un documento XML wddxPacket, esto lleva a un mal manejo en una llamada la wddx_deserialize.\"}]",
      "id": "CVE-2016-10162",
      "lastModified": "2024-11-21T02:43:27.003",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2017-01-24T21:59:00.307",
      "references": "[{\"url\": \"http://php.net/ChangeLog-7.php\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/95668\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securitytracker.com/id/1037659\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1296\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://bugs.php.net/bug.php?id=73831\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://php.net/ChangeLog-7.php\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/95668\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1037659\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1296\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugs.php.net/bug.php?id=73831\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2016-10162\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-01-24T21:59:00.307\",\"lastModified\":\"2026-05-13T00:24:29.033\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n php_wddx_pop_element en ext/wddx/wddx.c en PHP 7.0.x en versiones anteriores a 7.0.15 y 7.1.x en versiones anteriores a 7.1.1 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (referencia a puntero NULL y ca\u00edda de aplicaci\u00f3n) a trav\u00e9s de un nombre de clase inaplicable en un documento XML wddxPacket, esto lleva a un mal manejo en una llamada la wddx_deserialize.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B90B947-7B54-47F3-9637-2F4AC44079EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35848414-BD5D-4164-84DC-61ABBB1C4152\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B1F8402-8551-4F66-A9A7-81D472AB058E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A773E8E-48CD-4D35-A0FD-629BD9334486\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC492340-79AF-4676-A161-079A97EC6F0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1C2D8FE-C380-4B43-B634-A3DBA4700A71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EB58393-0C10-413C-8D95-6BAA8BC19A1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"751F51CA-9D88-4971-A6EC-8C0B72E8E22B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37B74118-8FC2-44CB-9673-A83DF777B2E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D56A200-1477-40DA-9444-CFC946157C69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD0D1CCC-A857-4C15-899E-08F9255CEE34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6745CC43-2836-4CD8-848F-EEA08AE9D5AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BEB6696-14F9-4D9B-9974-B682FFBB828E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04146390-021D-4147-9830-9EAA90D120A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD\"}]}]}],\"references\":[{\"url\":\"http://php.net/ChangeLog-7.php\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95668\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id/1037659\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1296\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugs.php.net/bug.php?id=73831\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://php.net/ChangeLog-7.php\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95668\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1037659\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1296\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugs.php.net/bug.php?id=73831\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-28T07:19:46+00:00",
      "cve": "CVE-2016-10162",
      "id": "CVE-2016-10162",
      "initial_release_date": "2016-01-01T00:00:00+00:00",
      "product_status:fixed": "254",
      "product_status:known_affected": "87",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "php: Null pointer dereference when unserializing PHP object",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-10162.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T02:06:51Z",
      "cve": "CVE-2016-10162",
      "id": "CVE-2016-10162",
      "initial_release_date": "2023-02-15T04:54:08Z",
      "product_status:known_affected": "660",
      "product_status:known_not_affected": "211",
      "product_status:recommended": "655",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2016-10162",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2016-10162.json",
      "version": "14"
    }
  }
}

CNVD-2017-01943

Vulnerability from cnvd - Published: 2017-02-24

Title

PHP拒绝服务漏洞（CNVD-2017-01943）

Description

PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。该语言支持多重语法、支持多数据库及操作系统和支持C、C++进行程序扩展等。 PHP 7.0.15之前的7.0.x版本和7.1.1之前的7.1.x版本中ext/wddx/wddx.c文件的php_wddx_pop_element函数存在安全漏洞。远程攻击者可借助wddxPacket XML文件中特制的类名利用该漏洞造成拒绝服务（空指针逆向引用和应用程序崩溃）。

Severity

中

Patch Name

PHP拒绝服务漏洞（CNVD-2017-01943）的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://gist.github.com/anonymous/5949c2ca31fb5bb030773a8e78571444

Reference

https://bugs.php.net/bug.php?id=73831 http://www.securityfocus.com/bid/95668

Impacted products

Name
['PHP PHP 7.0.，<7.0.15', 'PHP PHP 7.1.，<7.1.1']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "95668"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-10162",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10162"
    }
  },
  "description": "PHP\uff08PHP\uff1aHypertext Preprocessor\uff0cPHP\uff1a\u8d85\u6587\u672c\u9884\u5904\u7406\u5668\uff09\u662fPHP Group\u548c\u5f00\u653e\u6e90\u4ee3\u7801\u793e\u533a\u5171\u540c\u7ef4\u62a4\u7684\u4e00\u79cd\u5f00\u6e90\u7684\u901a\u7528\u8ba1\u7b97\u673a\u811a\u672c\u8bed\u8a00\u3002\u8be5\u8bed\u8a00\u652f\u6301\u591a\u91cd\u8bed\u6cd5\u3001\u652f\u6301\u591a\u6570\u636e\u5e93\u53ca\u64cd\u4f5c\u7cfb\u7edf\u548c\u652f\u6301C\u3001C++\u8fdb\u884c\u7a0b\u5e8f\u6269\u5c55\u7b49\u3002\r\n\r\nPHP 7.0.15\u4e4b\u524d\u76847.0.x\u7248\u672c\u548c7.1.1\u4e4b\u524d\u76847.1.x\u7248\u672c\u4e2dext/wddx/wddx.c\u6587\u4ef6\u7684php_wddx_pop_element\u51fd\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9wddxPacket XML\u6587\u4ef6\u4e2d\u7279\u5236\u7684\u7c7b\u540d\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7a7a\u6307\u9488\u9006\u5411\u5f15\u7528\u548c\u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83\uff09\u3002",
  "discovererName": "nguyenvuhoang199321",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://gist.github.com/anonymous/5949c2ca31fb5bb030773a8e78571444",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-01943",
  "openTime": "2017-02-24",
  "patchDescription": "PHP\uff08PHP\uff1aHypertext Preprocessor\uff0cPHP\uff1a\u8d85\u6587\u672c\u9884\u5904\u7406\u5668\uff09\u662fPHP Group\u548c\u5f00\u653e\u6e90\u4ee3\u7801\u793e\u533a\u5171\u540c\u7ef4\u62a4\u7684\u4e00\u79cd\u5f00\u6e90\u7684\u901a\u7528\u8ba1\u7b97\u673a\u811a\u672c\u8bed\u8a00\u3002\u8be5\u8bed\u8a00\u652f\u6301\u591a\u91cd\u8bed\u6cd5\u3001\u652f\u6301\u591a\u6570\u636e\u5e93\u53ca\u64cd\u4f5c\u7cfb\u7edf\u548c\u652f\u6301C\u3001C++\u8fdb\u884c\u7a0b\u5e8f\u6269\u5c55\u7b49\u3002\r\n\r\nPHP 7.0.15\u4e4b\u524d\u76847.0.x\u7248\u672c\u548c7.1.1\u4e4b\u524d\u76847.1.x\u7248\u672c\u4e2dext/wddx/wddx.c\u6587\u4ef6\u7684php_wddx_pop_element\u51fd\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9wddxPacket XML\u6587\u4ef6\u4e2d\u7279\u5236\u7684\u7c7b\u540d\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7a7a\u6307\u9488\u9006\u5411\u5f15\u7528\u548c\u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "PHP\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2017-01943\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "PHP PHP 7.0.*\uff0c\u003c7.0.15",
      "PHP PHP 7.1.*\uff0c\u003c7.1.1"
    ]
  },
  "referenceLink": "https://bugs.php.net/bug.php?id=73831\r\nhttp://www.securityfocus.com/bid/95668",
  "serverity": "\u4e2d",
  "submitTime": "2017-02-16",
  "title": "PHP\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2017-01943\uff09"
}

FKIE_CVE-2016-10162

Vulnerability from fkie_nvd - Published: 2017-01-24 21:59 - Updated: 2026-06-17 00:39

Severity

7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
cve@mitre.org	http://php.net/ChangeLog-7.php	Release Notes, Vendor Advisory
cve@mitre.org	http://www.securityfocus.com/bid/95668
cve@mitre.org	http://www.securitytracker.com/id/1037659
cve@mitre.org	https://access.redhat.com/errata/RHSA-2018:1296
cve@mitre.org	https://bugs.php.net/bug.php?id=73831	Issue Tracking
cve@mitre.org	https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b	Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://php.net/ChangeLog-7.php	Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/95668
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1037659
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2018:1296
af854a3a-2127-422b-91ae-364da2661108	https://bugs.php.net/bug.php?id=73831	Issue Tracking
af854a3a-2127-422b-91ae-364da2661108	https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b	Issue Tracking, Patch, Third Party Advisory

Impacted products

Vendor	Product	Version
php	php	7.0.0
php	php	7.0.1
php	php	7.0.2
php	php	7.0.3
php	php	7.0.4
php	php	7.0.5
php	php	7.0.6
php	php	7.0.7
php	php	7.0.8
php	php	7.0.9
php	php	7.0.10
php	php	7.0.11
php	php	7.0.12
php	php	7.0.13
php	php	7.0.14
php	php	7.1.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B90B947-7B54-47F3-9637-2F4AC44079EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "35848414-BD5D-4164-84DC-61ABBB1C4152",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B1F8402-8551-4F66-A9A7-81D472AB058E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A773E8E-48CD-4D35-A0FD-629BD9334486",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC492340-79AF-4676-A161-079A97EC6F0C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1C2D8FE-C380-4B43-B634-A3DBA4700A71",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EB58393-0C10-413C-8D95-6BAA8BC19A1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "751F51CA-9D88-4971-A6EC-8C0B72E8E22B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "37B74118-8FC2-44CB-9673-A83DF777B2E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D56A200-1477-40DA-9444-CFC946157C69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD0D1CCC-A857-4C15-899E-08F9255CEE34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "6745CC43-2836-4CD8-848F-EEA08AE9D5AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BEB6696-14F9-4D9B-9974-B682FFBB828E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "04146390-021D-4147-9830-9EAA90D120A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n php_wddx_pop_element en ext/wddx/wddx.c en PHP 7.0.x en versiones anteriores a 7.0.15 y 7.1.x en versiones anteriores a 7.1.1 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (referencia a puntero NULL y ca\u00edda de aplicaci\u00f3n) a trav\u00e9s de un nombre de clase inaplicable en un documento XML wddxPacket, esto lleva a un mal manejo en una llamada la wddx_deserialize."
    }
  ],
  "id": "CVE-2016-10162",
  "lastModified": "2026-06-17T00:39:11.097",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-01-24T21:59:00.307",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "http://php.net/ChangeLog-7.php"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/95668"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1037659"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2018:1296"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.php.net/bug.php?id=73831"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "http://php.net/ChangeLog-7.php"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/95668"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1037659"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2018:1296"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.php.net/bug.php?id=73831"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-4M9V-P964-9Q24

Vulnerability from github – Published: 2022-05-14 03:27 – Updated: 2022-05-14 03:27

Details

Severity

7.5 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2016-10162"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-476"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-01-24T21:59:00Z",
    "severity": "HIGH"
  },
  "details": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.",
  "id": "GHSA-4m9v-p964-9q24",
  "modified": "2022-05-14T03:27:45Z",
  "published": "2022-05-14T03:27:45Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10162"
    },
    {
      "type": "WEB",
      "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:1296"
    },
    {
      "type": "WEB",
      "url": "https://bugs.php.net/bug.php?id=73831"
    },
    {
      "type": "WEB",
      "url": "http://php.net/ChangeLog-7.php"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/95668"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1037659"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2016-10162

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2016-10162

Aliases

CVE-2016-10162

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2016-10162",
    "description": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.",
    "id": "GSD-2016-10162",
    "references": [
      "https://www.suse.com/security/cve/CVE-2016-10162.html",
      "https://access.redhat.com/errata/RHSA-2018:1296",
      "https://ubuntu.com/security/CVE-2016-10162",
      "https://alas.aws.amazon.com/cve/html/CVE-2016-10162.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2016-10162"
      ],
      "details": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.",
      "id": "GSD-2016-10162",
      "modified": "2023-12-13T01:21:26.374264Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2016-10162",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "95668",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/95668"
          },
          {
            "name": "RHSA-2018:1296",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:1296"
          },
          {
            "name": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b",
            "refsource": "CONFIRM",
            "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
          },
          {
            "name": "http://php.net/ChangeLog-7.php",
            "refsource": "CONFIRM",
            "url": "http://php.net/ChangeLog-7.php"
          },
          {
            "name": "1037659",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1037659"
          },
          {
            "name": "https://bugs.php.net/bug.php?id=73831",
            "refsource": "CONFIRM",
            "url": "https://bugs.php.net/bug.php?id=73831"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10162"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-476"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=73831",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking"
              ],
              "url": "https://bugs.php.net/bug.php?id=73831"
            },
            {
              "name": "http://php.net/ChangeLog-7.php",
              "refsource": "CONFIRM",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "http://php.net/ChangeLog-7.php"
            },
            {
              "name": "95668",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/95668"
            },
            {
              "name": "1037659",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1037659"
            },
            {
              "name": "RHSA-2018:1296",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2018:1296"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2018-05-04T01:29Z",
      "publishedDate": "2017-01-24T21:59Z"
    }
  }
}

RHSA-2018:1296

Vulnerability from csaf_redhat - Published: 2018-05-03 05:06 - Updated: 2026-06-28 12:12

Summary

Red Hat Security Advisory: rh-php70-php security, bug fix, and enhancement update

Severity

Moderate

Scope

37 vulnerabilities in this advisory, including CVE-2016-10162.

CVE-2016-10162

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Fixed: 254 products

https://access.redhat.com/errata/RHSA-2018:1296

Open the full advisory

RHSA-2018_1296

Vulnerability from csaf_redhat - Published: 2018-05-03 05:06 - Updated: 2024-11-15 02:07

Summary

Red Hat Security Advisory: rh-php70-php security, bug fix, and enhancement update

Severity

Moderate

Scope

37 vulnerabilities in this advisory, including CVE-2016-10162.

CVE-2016-10162

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Fixed: 254 products

https://access.redhat.com/errata/RHSA-2018:1296

Open the full advisory

SUSE-SU-2017:0534-1

Vulnerability from csaf_suse - Published: 2017-02-22 09:00 - Updated: 2017-02-22 09:00

Summary

Security update for php7

Severity

Important

Scope

13 vulnerabilities in this advisory, including CVE-2016-10162.

CVE-2016-10162

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 213 products

Open the full advisory

ubuntu-cve-2016-10162

Vulnerability from osv_ubuntu

Published

2017-01-24 00:00

Modified

2026-04-22 07:38

Summary

Details

Severity

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2016-10162	REPORT
	http://php.net/ChangeLog-7.php	REPORT
	https://ubuntu.com/security/notices/USN-3211-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2016-10162	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libapache2-mod-php7.0",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "libphp7.0-embed",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-bcmath",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-bz2",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-cgi",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-cli",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-common",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-curl",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-dba",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-enchant",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-fpm",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-gd",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-gmp",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-imap",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-interbase",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-intl",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-json",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-ldap",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-mbstring",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-mcrypt",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-mysql",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-odbc",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-opcache",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-pgsql",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-phpdbg",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-pspell",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-readline",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-recode",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-snmp",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-soap",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-sqlite3",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-sybase",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-tidy",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-xml",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-xmlrpc",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-xsl",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "php7.0-zip",
            "binary_version": "7.0.15-0ubuntu0.16.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "php7.0",
        "purl": "pkg:deb/ubuntu/php7.0@7.0.15-0ubuntu0.16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.15-0ubuntu0.16.04.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.1-5",
        "7.0.1-6",
        "7.0.2-1",
        "7.0.2-3",
        "7.0.2-4",
        "7.0.2-5",
        "7.0.3-2",
        "7.0.3-3",
        "7.0.3-9ubuntu1",
        "7.0.4-5ubuntu1",
        "7.0.4-5ubuntu2",
        "7.0.4-7ubuntu1",
        "7.0.4-7ubuntu2",
        "7.0.4-7ubuntu2.1",
        "7.0.8-0ubuntu0.16.04.1",
        "7.0.8-0ubuntu0.16.04.2",
        "7.0.8-0ubuntu0.16.04.3",
        "7.0.13-0ubuntu0.16.04.1",
        "7.0.15-0ubuntu0.16.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.",
  "id": "UBUNTU-CVE-2016-10162",
  "modified": "2026-04-22T07:38:06Z",
  "published": "2017-01-24T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-10162"
    },
    {
      "type": "REPORT",
      "url": "http://php.net/ChangeLog-7.php"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3211-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10162"
    }
  ],
  "related": [
    "USN-3211-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2016-10162"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2016-10162 (GCVE-0-2016-10162)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour