CVE-2016-7411

概要

参考情報

• openwall.com/lists/oss-security/2016/09/15/10 · Mailing List
• php.net/ChangeLog-5.php · Release Notes
• securityfocus.com/bid/93009
• securitytracker.com/id/1036836
• bugs.php.net/bug.php · Exploit
• php/php-src commit 6a7cc8f · Issue Tracking
• security.gentoo.org/glsa/201611-22

php のその他の脆弱性

• CVE-2026-109619高 8.1悪用確認済み（CISA KEV）PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may…
• CVE-2026-109618緊急 9.8悪用確認済み（CISA KEV）PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not prope…
• CVE-2026-92842中 5.9The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti…
• CVE-2026-91768中 6.5The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat…
• CVE-2026-91769中 4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to t…