Skip to content
OpenAdvisories
Unscored RHSA-2016:2750 80 CVEs

Red Hat Security Advisory: rh-php56 security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 66

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56 0:2.3-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-bcmath 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-cli 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-common 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-dba 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-dbg 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-debuginfo 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-devel 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-embedded 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-enchant 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-fpm 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-gd 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-gmp 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-imap 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-intl 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-ldap 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-mbstring 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-mysqlnd 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-odbc 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-opcache 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pdo 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pear 1:1.9.5-4.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pgsql 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-process 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pspell 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-recode 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-snmp 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-soap 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-tidy 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-xml 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-xmlrpc 0:5.6.25-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-runtime 0:2.3-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-scldevel 0:2.3-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56 0:2.3-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-bcmath 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-cli 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-common 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-dba 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-dbg 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-debuginfo 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-devel 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-embedded 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-enchant 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-fpm 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-gd 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-gmp 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-intl 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-ldap 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-mbstring 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-mysqlnd 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-odbc 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-opcache 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pdo 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pear 1:1.9.5-4.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pgsql 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-process 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pspell 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-recode 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-snmp 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-soap 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-xml 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-xmlrpc 0:5.6.25-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-runtime 0:2.3-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-scldevel 0:2.3-1.el7

Vulnerabilities 80

  • Unscored —
    CVE-2013-7456

    gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.…

    libgd2 libgd2 Debian Ubuntu
  • Unscored —
    CVE-2014-9767

    Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.…

    php5 hhvm Ubuntu
  • Unscored —
    CVE-2015-2325

    The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a d…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-2326

    The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-2327

    PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive ba…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-2328

    PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows rem…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-3210

    Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code …

    pcre3 Debian
  • Unscored —
    CVE-2015-3217

    PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to ca…

    pcre3 Debian
  • Unscored —
    CVE-2015-5073

    Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attacke…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8381

    The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles t…

    pcre3 Debian
  • Unscored —
    CVE-2015-8383

    PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of ser…

    pcre3 Debian
  • Unscored —
    CVE-2015-8384

    PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back refere…

    pcre3 Debian
  • Unscored —
    CVE-2015-8385

    PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, wh…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8386

    PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows r…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8388

    PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing paren…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8391

    The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote atta…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8392

    PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of …

    pcre3 Debian
  • Unscored —
    CVE-2015-8395

    PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly …

    pcre3 Debian
  • Unscored —
    CVE-2015-8835

    The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before …

    php5 Ubuntu
  • Unscored —
    CVE-2015-8865

    The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6…

    php5 php7.0 file file Debian Ubuntu
  • Unscored —
    CVE-2015-8866

    ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread fro…

    php5 Ubuntu
  • Unscored —
    CVE-2015-8867

    The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x …

    php5 Ubuntu
  • Unscored —
    CVE-2015-8873

    Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-8874

    Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a c…

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2015-8876

    Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exc…

    php5 Ubuntu
  • Unscored —
    CVE-2015-8877

    The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in …

    libgd2 libgd2 Debian Ubuntu
  • Unscored —
    CVE-2015-8879

    The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR colu…

    php5 Ubuntu
  • Unscored —
    CVE-2015-8935

    The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports d…

    php5 Ubuntu
  • Unscored —
    CVE-2016-1903

    The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, an…

    php5 Ubuntu
  • Unscored —
    CVE-2016-2554 EPSS 11%

    Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows re…

    php5 Ubuntu
  • Unscored —
    CVE-2016-3074 Public exploit EPSS 36%

    Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial o…

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-3141 Public exploit EPSS 36%

    Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote…

    php5 Ubuntu
  • Unscored —
    CVE-2016-3142

    The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remo…

    php5 Ubuntu
  • Unscored —
    CVE-2016-4070

    Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, an…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4071 Public exploit EPSS 20%

    Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4072

    The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute a…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4073

    Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4342

    ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompres…

    php5 Ubuntu
  • Unscored —
    CVE-2016-4343

    The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size…

    php5 Ubuntu
  • Unscored —
    CVE-2016-4473

    /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as p…

  • Unscored —
    CVE-2016-4537

    The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a …

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4538

    The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies c…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4539

    The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 all…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4540

    The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4541

    The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x …

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4542

    The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 do…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4543 EPSS 12%

    The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4544

    The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-5093

    The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and …

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-5094

    Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 …

    php5 Ubuntu
  • Unscored —
    CVE-2016-5096

    Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remot…

    php5 Ubuntu
  • Unscored —
    CVE-2016-5114

    sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of t…

    php5 Ubuntu
  • Unscored —
    CVE-2016-5399 Public exploit

    The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote atta…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-5766

    Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used…

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-5767

    Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used…

    libgd2 gd Debian Alpine
  • Unscored —
    CVE-2016-5768

    Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-5770

    Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and …

  • Unscored —
    CVE-2016-5771 EPSS 15%

    spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize…

    php5 Ubuntu
  • Unscored —
    CVE-2016-5772

    Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-5773

    php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts wit…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-6128

    The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP befo…

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-6207

    Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before …

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-6288

    The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of s…

    php5 hhvm Ubuntu
  • Unscored —
    CVE-2016-6289

    Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, …

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-6290

    ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a cert…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-6291

    The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-6292

    The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-6294

    The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-6295

    ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unseriali…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-6296

    Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in P…

    php5 php7.0 xmlrpc-epi xmlrpc-epi Debian Ubuntu
  • Unscored —
    CVE-2016-6297

    Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.2…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7124 EPSS 16%

    ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which al…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7125

    ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers inc…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7126

    The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly valida…

  • Unscored —
    CVE-2016-7127

    The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gam…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7128

    The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7129

    The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attacker…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7130

    The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7131

    ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7132

    ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

    php5 php7.0 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1207198
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1207202
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1237223
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1260716
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287623
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287636
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1297710
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1297717
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1305536
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1305543
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1315312
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1315328
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1321893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1323074
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1323103
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1323106
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1323108
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1323114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1323118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1330418
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1330420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1332454
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1332860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1332865
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1332872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1332877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1336772
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1336775
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1338896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1338907