{"id":"CVE-2016-10712","aliases":["BELL-CVE-2016-10712","DLA-818-1","EUVD-2016-1711","GHSA-5jr3-87vw-j587","SUSE-SU-2018:0530-1","SUSE-SU-2018:0806-1","UBUNTU-CVE-2016-10712","USN-3566-2","USN-3600-1"],"status":"published","title":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...","description":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02254,"percentile":0.83051,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2017-02-07T00:00:00Z","modified":"2026-10-24T10:30:33Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","fixed_in":["5.5.14-109.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"php5","fixed_in":["5.5.14-109.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","fixed_in":["5.5.14-109.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.24"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.45-0+deb7u7"}]}],"versions":["5.4.11-1","5.4.15-1","5.4.34-0+deb7u1","5.4.35-0+deb7u1","5.4.35-0+deb7u2","5.4.36-0+deb7u1","5.4.36-0+deb7u3","5.4.38-0+deb7u1","5.4.39-0+deb7u1","5.4.39-0+deb7u2","5.4.4-14","5.4.4-14+deb7u1","5.4.4-14+deb7u10","5.4.4-14+deb7u11","5.4.4-14+deb7u12","5.4.4-14+deb7u13","5.4.4-14+deb7u14","5.4.4-14+deb7u2","5.4.4-14+deb7u3","5.4.4-14+deb7u4","5.4.4-14+deb7u5","5.4.4-14+deb7u7","5.4.4-14+deb7u8","5.4.4-14+deb7u9","5.4.4-15","5.4.4-15.1","5.4.41-0+deb7u1","5.4.44-0+deb7u1","5.4.45-0+deb7u1","5.4.45-0+deb7u2","5.4.45-0+deb7u3","5.4.45-0+deb7u4","5.4.45-0+deb7u5","5.4.45-0+deb7u6","5.4.6-1","5.4.6-2","5.4.8-1","5.4.9-1","5.4.9-2","5.4.9-3","5.4.9-4"],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.24"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm2"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.24"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.28-0ubuntu0.16.04.1"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1"],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"php","product":"php"}],"references":[{"url":"https://usn.ubuntu.com/3600-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugs.php.net/bug.php?id=71323","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6297a117d77fa3a0df2e21ca926a92c231819cd5","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://usn.ubuntu.com/3566-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10712"},{"url":"https://git.php.net/?p=php-src.git;a=commit;h=6297a117d77fa3a0df2e21ca926a92c231819cd5"},{"url":"https://github.com/advisories/GHSA-5jr3-87vw-j587"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-10712","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180530-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1080234","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180806-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076220","tags":["report"]},{"url":"https://bugzilla.suse.com/1076391","tags":["report"]},{"url":"https://bugzilla.suse.com/1083639","tags":["report"]},{"url":"https://bugzilla.suse.com/986247","tags":["report"]},{"url":"https://bugzilla.suse.com/986391","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7584","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-10712","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3600-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3566-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-7584","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-10712","description":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.","status":"published","published":"2018-02-09T06:00:00Z","modified":"2024-08-06T03:30:20.196Z","updated_at":"2026-11-02T14:33:31.450804Z"}],"euvd":[{"id":"EUVD-2016-1711","description":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.","status":"published","published":"2018-02-09T06:00:00Z","modified":"2024-08-06T03:30:20Z","updated_at":"2026-11-03T02:22:23.66215Z"}],"ghsa":[{"id":"GHSA-5jr3-87vw-j587","title":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...","description":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.","status":"published","published":"2022-05-14T01:00:43Z","modified":"2023-02-02T05:02:52Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:51:31.853894Z"}],"nvd":[{"id":"CVE-2016-10712","description":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.","status":"published","published":"2018-02-09T06:29:00.21Z","modified":"2026-06-17T00:40:12.847Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:39.176887Z"}],"osv":[{"id":"BELL-CVE-2016-10712","title":"CVE-2016-10712 does not affect BellSoft software","status":"withdrawn","published":"2018-02-09T06:29:00Z","modified":"2026-01-26T09:49:05.511332Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2016-10712","description":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.","status":"published","published":"2018-02-09T06:29:00.21Z","modified":"2026-10-24T10:30:33.398571711Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"UBUNTU-CVE-2016-10712","description":"In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.","status":"published","published":"2018-02-09T00:00:00Z","modified":"2026-04-22T10:30:45.612998Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"DLA-818-1","title":"php5 - security update","status":"published","published":"2017-02-07T00:00:00Z","modified":"2026-03-09T02:11:16.079306Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"SUSE-SU-2018:0530-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\n- CVE-2016-10712: In PHP all of the return values of stream_get_meta_data could be controlled if the input can be controlled (e.g., during file uploads).  (bsc#1080234)\n\n","status":"published","published":"2018-02-23T08:43:50Z","modified":"2026-02-04T03:41:11.233681Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0806-1","title":"Security update for php53","description":"This update for php53 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2016-10712: In PHP all of the return values of stream_get_meta_data\n  could be controlled if the input can be controlled (e.g., during file\n  uploads).  (bsc#1080234)\n- CVE-2018-5712: Prevent reflected XSS on the PHAR 404 error page via the\n  URI of a request for a .phar file that allowed for information disclosure\n  (bsc#1076220)\n- CVE-2018-5711: Prevent integer signedness error that could have lead\n  to an infinite loop via a crafted GIF file allowing for DoS (bsc#1076391)\n- CVE-2016-5773: php_zip.c in the zip extension in PHP improperly\n  interacted with the unserialize implementation and garbage collection,\n  which allowed remote attackers to execute arbitrary code or cause a\n  denial of service (use-after-free and application crash) via crafted\n  serialized data containing a ZipArchive object.  (bsc#986247)\n- CVE-2016-5771: spl_array.c in the SPL extension in PHP improperly\n  interacted with the unserialize implementation and garbage collection,\n  which allowed remote attackers to execute arbitrary code or cause a\n  denial of service (use-after-free and application crash) via crafted\n  serialized data.  (bsc#986391)\n- CVE-2018-7584: Fixed stack-based buffer under-read while parsing an\n  HTTPresponse in the php_stream_url_wrap_http_ex.  (bsc#1083639)\n\n","status":"published","published":"2018-03-26T08:38:15Z","modified":"2026-02-04T03:03:16.173163Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3566-2","title":"php5 vulnerabilities","description":"USN-3566-1 fixed several vulnerabilities in PHP. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nIt was discovered that PHP incorrectly handled certain files. An attacker\ncould possibly use this issue to access sensitive information.\n(CVE-2018-20783)\n\nIt was discovered that PHP incorrectly handled certain files. An attacker\ncould possibly use this issue to access sensitive information or possibly\ncause a crash, resulting in a denial of service. (CVE-2019-11036)\n\nOriginal advisory details:\n\n It was discovered that PHP incorrectly handled memory when unserializing\n certain data. A remote attacker could use this issue to cause PHP to crash,\n resulting in a denial of service, or possibly execute arbitrary code. This\n issue only affected Ubuntu 12.04 ESM. (CVE-2017-12933)\n\n It was discovered that PHP incorrectly handled locale length. A remote attacker\n could possibly use this issue to cause PHP to crash, resulting in a denial of service.\n This issue only affected Ubuntu 12.04 ESM. (CVE-2017-11362)\n\n It was discovered that PHP incorrectly handled certain stream metadata. A remote\n attacker could possibly use this issue to set arbitrary metadata. This issue only\n affected Ubuntu 12.04 ESM. (CVE-2016-10712)\n","status":"published","published":"2019-05-22T11:58:43Z","modified":"2026-04-22T09:43:40.044382Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3600-1","title":"php5, php7.0, php7.1 vulnerabilities","description":"It was discovered that PHP incorrectly handled certain stream metadata. A\nremote attacker could possibly use this issue to set arbitrary metadata.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2016-10712)\n\nIt was discovered that PHP incorrectly handled the PHAR 404 error page. A\nremote attacker could possibly use this issue to conduct cross-site\nscripting (XSS) attacks. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 17.10. (CVE-2018-5712)\n\nIt was discovered that PHP incorrectly handled parsing certain HTTP\nresponses. A remote attacker could use this issue to cause PHP to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2018-7584)\n","status":"published","published":"2018-03-19T11:53:52Z","modified":"2026-04-22T09:45:06.264649Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}