CVE-2016-4473

CRÍTICO 9.8CVE-2016-4473 · Published 08/06/2017 · updated 17/06/2026

En resumen

CVE-2016-4473 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a php (php).
Probabilidad de explotación en los próximos 30 días (EPSS): 7.8%, mayor que el 94.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
php php	`= 5.6.0= 5.6.1= 5.6.10= 5.6.11= 5.6.12= 5.6.13= 5.6.14= 5.6.15= 5.6.16= 5.6.17= 5.6.18= 5.6.19= 5.6.2= 5.6.20= 5.6.21= 5.6.22= 5.6.3= 5.6.4= 5.6.5= 5.6.6= 5.6.7= 5.6.8= 5.6.9= 7.0.7`	No fix yet

Description

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

References

lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2016-2750.html · Third Party Advisory
securityfocus.com/bid/98999 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Exploit

Más vulnerabilidades de php

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

php

= 5.6.0= 5.6.1= 5.6.10= 5.6.11= 5.6.12= 5.6.13= 5.6.14= 5.6.15= 5.6.16= 5.6.17= 5.6.18= 5.6.19= 5.6.2= 5.6.20= 5.6.21= 5.6.22= 5.6.3= 5.6.4= 5.6.5= 5.6.6= 5.6.7= 5.6.8= 5.6.9= 7.0.7

No fix yet

Más vulnerabilidades de php

Ver todo →