The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade php55 | Jun 15, 2016 | May 21, 2016 |
| Debian | — | Upgrade php5Upgrade php7.0 | Mar 31, 2017 | May 21, 2016 |
| Freebsd | — | Upgrade php56Upgrade php55-pharUpgrade php70-intlUpgrade php56-gdUpgrade php55-gdUpgrade php70-gdUpgrade php55 | Dec 10, 2025 | May 28, 2016 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 27, 2016 | May 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade php-ldapUpgrade php-cliUpgrade php-commonUpgrade php-xmlUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-odbcUpgrade php-gdUpgrade phpUpgrade php-soapUpgrade php-xmlrpcUpgrade php-processUpgrade php-recodeUpgrade php-pdo | Nov 30, 2017 | May 21, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-soapUpgrade php-processUpgrade php-pdoUpgrade php-pgsqlUpgrade php-gdUpgrade php-odbcUpgrade phpUpgrade php-recodeUpgrade php-mysqlUpgrade php-xmlUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-commonUpgrade php-cli | Nov 30, 2017 | May 21, 2016 |
| Php | — | Upgrade to PHP version 5.6.18Upgrade to PHP version 7.0.3 | Jun 3, 2016 | May 21, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 10, 2016 |
| Suse | — | Upgrade php5-wddxUpgrade php5-suhosinUpgrade php5-jsonUpgrade php5-posixUpgrade php5-dba-debuginfoUpgrade php5-curl-debuginfoUpgrade php5-pcntlUpgrade php5-sysvsemUpgrade php5-fileinfoUpgrade php5-imap-debuginfoUpgrade php5-mysqlUpgrade php5-sockets-debuginfoUpgrade php5-sysvmsg-debuginfoUpgrade php5-calendarUpgrade php5-sysvshmUpgrade php5-dbaUpgrade php5-pdoUpgrade php5-readlineUpgrade php5-tokenizer-debuginfoUpgrade php5-xmlreaderUpgrade php5-gmpUpgrade php5-mysql-debuginfoUpgrade php5-gdUpgrade php5-bcmath-debuginfoUpgrade php5-gd-debuginfoUpgrade php5-mssqlUpgrade php5-bcmathUpgrade php5-tokenizerUpgrade php5-odbcUpgrade php5-soap-debuginfoUpgrade php5-odbc-debuginfoUpgrade php5-zipUpgrade apache2-mod_php5-debuginfoUpgrade php5-tidy-debuginfoUpgrade php5-opcache-debuginfoUpgrade php5-soapUpgrade php5-zlib-debuginfoUpgrade php5-mssql-debuginfoUpgrade php5-shmop-debuginfoUpgrade php5-zip-debuginfoUpgrade php5-pspellUpgrade apache2-mod_php5Upgrade php5-opcacheUpgrade php5-xmlrpc-debuginfoUpgrade php5-posix-debuginfoUpgrade php5-exif-debuginfoUpgrade php5-pharUpgrade php5-xmlwriterUpgrade php5-fileinfo-debuginfoUpgrade php5-openssl-debuginfoUpgrade php5-pgsqlUpgrade php5-enchantUpgrade php5-fastcgi-debuginfoUpgrade php5-bz2-debuginfoUpgrade php5Upgrade php5-intl-debuginfoUpgrade php5-intlUpgrade php5-develUpgrade php5-pcntl-debuginfoUpgrade php5-shmopUpgrade php5-enchant-debuginfoUpgrade php5-ldap-debuginfoUpgrade php5-sqlite-debuginfoUpgrade php5-xmlreader-debuginfoUpgrade php5-pearUpgrade php5-snmpUpgrade php5-sysvshm-debuginfoUpgrade php5-gmp-debuginfoUpgrade php5-zlibUpgrade php5-firebirdUpgrade php5-readline-debuginfoUpgrade php5-ftpUpgrade php5-snmp-debuginfoUpgrade php5-bz2Upgrade php5-sysvsem-debuginfoUpgrade php5-xmlrpcUpgrade php5-opensslUpgrade php5-curlUpgrade php5-phar-debuginfoUpgrade php5-pgsql-debuginfoUpgrade php5-gettext-debuginfoUpgrade php5-domUpgrade php5-mbstringUpgrade php5-fpm-debuginfoUpgrade php5-mcryptUpgrade php5-socketsUpgrade php5-iconv-debuginfoUpgrade php5-sqliteUpgrade php5-xmlwriter-debuginfoUpgrade php5-fpmUpgrade php5-firebird-debuginfoUpgrade php5-debugsourceUpgrade php5-iconvUpgrade php5-imapUpgrade php5-gettextUpgrade php5-suhosin-debuginfoUpgrade php5-debuginfoUpgrade php5-xsl-debuginfoUpgrade php5-dom-debuginfoUpgrade php5-wddx-debuginfoUpgrade php5-fastcgiUpgrade php5-tidyUpgrade php5-ldapUpgrade php5-ftp-debuginfoUpgrade php5-mbstring-debuginfoUpgrade php5-exifUpgrade php5-ctype-debuginfoUpgrade php5-json-debuginfoUpgrade php5-ctypeUpgrade php5-xslUpgrade php5-sysvmsgUpgrade php5-pspell-debuginfoUpgrade php5-calendar-debuginfoUpgrade php5-pdo-debuginfoUpgrade php5-mcrypt-debuginfo | May 19, 2016 | May 19, 2016 |
| Ubuntu | — | Upgrade php7.0-fpmUpgrade php5-cliUpgrade php5-fpmUpgrade php5-cgiUpgrade php7.0-cliUpgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade libapache2-mod-php5 | May 24, 2016 | May 21, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub