Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest version | Nov 11, 2016 | Jul 25, 2016 |
| Debian | — | Upgrade php7.0Upgrade php5 | Jul 27, 2016 | Jul 25, 2016 |
| Freebsd | — | Upgrade php56-zipUpgrade php56Upgrade php55-zipUpgrade php70-gdUpgrade php55-bz2Upgrade php56-exifUpgrade php70-zipUpgrade php70-curlUpgrade php56-xmlrpcUpgrade php70-bz2Upgrade php55-exifUpgrade php55-odbcUpgrade php56-gdUpgrade php70-exifUpgrade php70-snmpUpgrade php70-mcryptUpgrade php70-odbcUpgrade php55Upgrade php56-odbcUpgrade php55-xmlrpcUpgrade php70Upgrade php70-xmlrpcUpgrade php56-snmpUpgrade php55-gdUpgrade php56-bz2Upgrade php55-snmp | Dec 10, 2025 | Jul 26, 2016 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jul 25, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-commonUpgrade php-cliUpgrade php-recodeUpgrade php-odbcUpgrade phpUpgrade php-processUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-ldapUpgrade php-soapUpgrade php-mysqlUpgrade php-pdoUpgrade php-gdUpgrade php-pgsql | Sep 12, 2019 | Jul 25, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-processUpgrade php-commonUpgrade phpUpgrade php-recodeUpgrade php-xmlUpgrade php-cliUpgrade php-odbcUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-ldapUpgrade php-soap | Sep 25, 2019 | Jul 25, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-odbcUpgrade php-commonUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-soapUpgrade php-pdoUpgrade php-recodeUpgrade php-processUpgrade php-ldapUpgrade phpUpgrade php-xmlUpgrade php-gdUpgrade php-cli | Aug 16, 2019 | Jul 25, 2016 |
| Oracle Solaris | — | Upgrade web/php-56 to version 5.6.30-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56/extension/php-suhosin-extension to version 0.9.37.1-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56/extension/php-xdebug to version 2.3.2-0.175.3.22.0.2.0 on Solaris 11.3 | Jul 19, 2017 | Jul 25, 2016 |
| Php | — | Upgrade to PHP version 5.5.38Upgrade to PHP version 7.0.9Upgrade to PHP version 5.6.24 | Aug 2, 2016 | Jul 25, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 29, 2016 |
| Suse | — | Upgrade php7-fpmUpgrade php53-xmlreaderUpgrade php7-sysvsemUpgrade php53-iconvUpgrade php5-opensslUpgrade php53-suhosinUpgrade php7-zlibUpgrade php7-bcmathUpgrade apache2-mod_php7Upgrade php5-sysvsemUpgrade php5-xslUpgrade php53-mysqlUpgrade php7-sqliteUpgrade php7-gettextUpgrade php7-iconvUpgrade apache2-mod_php5Upgrade php53-calendarUpgrade php7-pgsqlUpgrade php5-bcmathUpgrade php53-zipUpgrade php53-ftpUpgrade php53-sysvsemUpgrade php5-posixUpgrade php53-shmopUpgrade php53-curlUpgrade php5-mcryptUpgrade php53-pgsqlUpgrade php5-ctypeUpgrade php53-imapUpgrade php7Upgrade php53-bz2Upgrade php53-ldapUpgrade php5-xmlrpcUpgrade php5-mbstringUpgrade php5-pdoUpgrade php5-wddxUpgrade php5-iconvUpgrade php5-fastcgiUpgrade php7-exifUpgrade php7-curlUpgrade php53-sysvmsgUpgrade php53-tidyUpgrade php5-domUpgrade php5-pharUpgrade php53-soapUpgrade php53-bcmathUpgrade php53-gettextUpgrade php53-fastcgiUpgrade php5-gmpUpgrade php7-xmlwriterUpgrade php7-develUpgrade php53-wddxUpgrade php7-pharUpgrade php7-enchantUpgrade php7-soapUpgrade php53-develUpgrade php5-develUpgrade php7-mbstringUpgrade php7-jsonUpgrade php5-jsonUpgrade php5-xmlwriterUpgrade php7-domUpgrade php53-odbcUpgrade php5-opcacheUpgrade php5-zipUpgrade php5-gettextUpgrade php7-intlUpgrade php7-posixUpgrade php5-hashUpgrade php7-pdoUpgrade php5Upgrade php7-snmpUpgrade php7-sysvmsgUpgrade php7-bz2Upgrade php7-ftpUpgrade apache2-mod_php53Upgrade php53-gmpUpgrade php5-xmlreaderUpgrade php5-pcntlUpgrade php7-socketsUpgrade php5-imapUpgrade php5-socketsUpgrade php53-posixUpgrade php7-wddxUpgrade php7-tokenizerUpgrade php7-gdUpgrade php5-ftpUpgrade php53-mbstringUpgrade php53-socketsUpgrade php5-dbaUpgrade php53-pcntlUpgrade php5-fpmUpgrade php7-pcntlUpgrade php5-sysvmsgUpgrade php53-exifUpgrade php53-pspellUpgrade php7-xmlrpcUpgrade php5-shmopUpgrade php5-odbcUpgrade php5-gdUpgrade php53-gdUpgrade php5-enchantUpgrade php5-snmpUpgrade php5-sqliteUpgrade php7-xmlreaderUpgrade php5-bz2Upgrade php5-fileinfoUpgrade php7-dbaUpgrade php53-sysvshmUpgrade php7-fastcgiUpgrade php53-opensslUpgrade php7-pspellUpgrade php7-sysvshmUpgrade php7-ctypeUpgrade php7-odbcUpgrade php5-pearUpgrade php53-tokenizerUpgrade php7-pearUpgrade php7-calendarUpgrade php53-readlineUpgrade php7-shmopUpgrade php5-ldapUpgrade php7-ldapUpgrade php53-pearUpgrade php5-soapUpgrade php53-intlUpgrade php53-jsonUpgrade php5-curlUpgrade php5-zlibUpgrade php7-opcacheUpgrade php53-xmlwriterUpgrade php5-suhosinUpgrade php7-mcryptUpgrade php5-exifUpgrade php53-xmlrpcUpgrade php53-pdoUpgrade php7-fileinfoUpgrade php5-mysqlUpgrade php5-sysvshmUpgrade php7-imapUpgrade php5-intlUpgrade php53Upgrade php53-fileinfoUpgrade php7-pear-archive_tarUpgrade php5-calendarUpgrade php53-dbaUpgrade php53-snmpUpgrade php53-sqliteUpgrade php7-gmpUpgrade php53-xslUpgrade php7-mysqlUpgrade php7-xslUpgrade php53-zlibUpgrade php53-domUpgrade php7-zipUpgrade php5-tokenizerUpgrade php53-mcryptUpgrade php53-ctypeUpgrade php7-opensslUpgrade php5-pspellUpgrade php5-dbaseUpgrade php5-pgsql | Aug 22, 2016 | Jul 25, 2016 |
| Ubuntu | — | Upgrade libapache2-mod-php7.0Upgrade php7.0-fpmUpgrade php5-cgiUpgrade php5-fpmUpgrade php7.0-cliUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php7.0-cgi | Aug 2, 2016 | Jul 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub