Summary
It was discovered that xmlrpc-epi incorrectly handled lengths in the
simplestring_addn function. A remote attacker could use this issue to cause
applications using xmlrpc-epi such as PHP to crash, resulting in a denial
of service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | xmlrpc-epi | 0.54.2-1.1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in P…
References
-
report
https://ubuntu.com/security/CVE-2016-6296