CVE-2016-9137

Mô tả

Tham khảo

• git.php.net
• debian.org/security/2016/dsa-3698
• openwall.com/lists/oss-security/2016/11/01/2 · Third Party Advisory
• php.net/ChangeLog-5.php · Release Notes
• php.net/ChangeLog-7.php · Release Notes
• securityfocus.com/bid/93577 · Third Party Advisory
• bugs.php.net/bug.php · Exploit
• tenable.com/security/tns-2016-19

Lỗ hổng khác của php

• CVE-2026-109619CAO 8.1ĐANG BỊ KHAI THÁC (CISA KEV)PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may…
• CVE-2026-109618NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not prope…
• CVE-2026-92842TRUNG BÌNH 5.9The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti…
• CVE-2026-91768TRUNG BÌNH 6.5The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat…
• CVE-2026-91769TRUNG BÌNH 4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to t…