{"id":"CVE-2016-4473","aliases":["DLA-628-1","EUVD-2016-5460","GHSA-jvpg-hmq4-6326","RHSA-2016:2750","SUSE-SU-2016:2460-1","SUSE-SU-2016:2460-2","UBUNTU-CVE-2016-4473"],"status":"published","title":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code....","description":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07753,"percentile":0.94673,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2016-09-18T00:00:00Z","modified":"2026-10-24T10:31:01Z","affected":[{"source":"osv","ecosystem":"Debian:7","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.45-0+deb7u5"}]}],"versions":["5.4.11-1","5.4.15-1","5.4.34-0+deb7u1","5.4.35-0+deb7u1","5.4.35-0+deb7u2","5.4.36-0+deb7u1","5.4.36-0+deb7u3","5.4.38-0+deb7u1","5.4.39-0+deb7u1","5.4.39-0+deb7u2","5.4.4-14","5.4.4-14+deb7u1","5.4.4-14+deb7u10","5.4.4-14+deb7u11","5.4.4-14+deb7u12","5.4.4-14+deb7u13","5.4.4-14+deb7u14","5.4.4-14+deb7u2","5.4.4-14+deb7u3","5.4.4-14+deb7u4","5.4.4-14+deb7u5","5.4.4-14+deb7u7","5.4.4-14+deb7u8","5.4.4-14+deb7u9","5.4.4-15","5.4.4-15.1","5.4.41-0+deb7u1","5.4.44-0+deb7u1","5.4.45-0+deb7u1","5.4.45-0+deb7u2","5.4.45-0+deb7u3","5.4.45-0+deb7u4","5.4.6-1","5.4.6-2","5.4.8-1","5.4.9-1","5.4.9-2","5.4.9-3","5.4.9-4"],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.9.5-4.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-php56-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-1.el6"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.9.5-4.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.25-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-php56-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-1.el7"}]}],"bundled":80},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-15.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-15.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-15.1"}]}],"bundled":29}],"products":[{"vendor":"php","product":"php"},{"vendor":"suse","product":"linux_enterprise_module_for_web_scripting"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/98999","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347772","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","VDB Entry","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4473","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jvpg-hmq4-6326"},{"url":"https://access.redhat.com/errata/RHSA-2016:2750","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1228283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1237223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374711","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2750.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7456","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7456","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9767","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9767","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2325","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2326","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2327","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3210","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3210","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3217","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3217","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3217","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5073","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5073","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8381","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8381","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8381","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8383","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8384","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8385","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8386","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8388","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8388","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8391","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8391","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8391","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8392","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8392","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8395","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8395","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8395","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8835","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8835","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8865","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8865","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8866","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8866","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8867","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8867","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8867","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8873","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8874","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8876","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8876","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8876","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8877","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8879","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8935","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1903","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3074","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3074","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4070","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4071","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4071","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4071","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4072","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4072","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4073","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4073","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4342","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4343","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4473","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4473","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4537","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4538","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4538","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4539","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5093","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5093","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5114","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5399","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5399","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5766","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5766","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5766","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5767","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5767","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5768","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5768","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5770","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5770","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5770","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5771","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5771","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5772","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5772","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5773","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5773","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6128","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6128","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6288","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6288","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6289","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6290","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6290","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6290","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6291","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6292","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6292","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6292","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6294","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6294","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6296","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6296","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7124","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7124","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7125","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7125","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7126","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7128","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7128","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7129","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7132","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7132","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7132","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162460-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001950","tags":["report"]},{"url":"https://bugzilla.suse.com/987580","tags":["report"]},{"url":"https://bugzilla.suse.com/988032","tags":["report"]},{"url":"https://bugzilla.suse.com/991422","tags":["report"]},{"url":"https://bugzilla.suse.com/991424","tags":["report"]},{"url":"https://bugzilla.suse.com/991426","tags":["report"]},{"url":"https://bugzilla.suse.com/991427","tags":["report"]},{"url":"https://bugzilla.suse.com/991428","tags":["report"]},{"url":"https://bugzilla.suse.com/991429","tags":["report"]},{"url":"https://bugzilla.suse.com/991430","tags":["report"]},{"url":"https://bugzilla.suse.com/991434","tags":["report"]},{"url":"https://bugzilla.suse.com/991437","tags":["report"]},{"url":"https://bugzilla.suse.com/995512","tags":["report"]},{"url":"https://bugzilla.suse.com/997206","tags":["report"]},{"url":"https://bugzilla.suse.com/997207","tags":["report"]},{"url":"https://bugzilla.suse.com/997208","tags":["report"]},{"url":"https://bugzilla.suse.com/997210","tags":["report"]},{"url":"https://bugzilla.suse.com/997211","tags":["report"]},{"url":"https://bugzilla.suse.com/997220","tags":["report"]},{"url":"https://bugzilla.suse.com/997225","tags":["report"]},{"url":"https://bugzilla.suse.com/997230","tags":["report"]},{"url":"https://bugzilla.suse.com/997247","tags":["report"]},{"url":"https://bugzilla.suse.com/997248","tags":["report"]},{"url":"https://bugzilla.suse.com/997257","tags":["report"]},{"url":"https://bugzilla.suse.com/999313","tags":["report"]},{"url":"https://bugzilla.suse.com/999679","tags":["report"]},{"url":"https://bugzilla.suse.com/999680","tags":["report"]},{"url":"https://bugzilla.suse.com/999684","tags":["report"]},{"url":"https://bugzilla.suse.com/999685","tags":["report"]},{"url":"https://bugzilla.suse.com/999819","tags":["report"]},{"url":"https://bugzilla.suse.com/999820","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162460-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-4473","tags":["report"]},{"url":"http://php.net/ChangeLog-5.php#5.6.23","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-4473","description":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.","status":"published","published":"2017-06-08T20:00:00Z","modified":"2024-08-06T00:32:25.435Z","updated_at":"2026-11-02T14:33:35.149563Z"}],"euvd":[{"id":"EUVD-2016-5460","description":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.","status":"published","published":"2017-06-08T20:00:00Z","modified":"2024-08-06T00:32:25Z","updated_at":"2026-11-03T02:22:46.329763Z"}],"ghsa":[{"id":"GHSA-jvpg-hmq4-6326","title":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code....","description":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.","status":"published","published":"2022-05-17T02:40:59Z","modified":"2023-01-27T05:05:27Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:42:41.939038Z"}],"nvd":[{"id":"CVE-2016-4473","description":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.","status":"published","published":"2017-06-08T20:29:00.217Z","modified":"2026-06-17T00:47:37.513Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:03:38.290327Z"}],"osv":[{"id":"CVE-2016-4473","description":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.","status":"published","published":"2017-06-08T20:29:00.217Z","modified":"2026-10-24T10:31:01.937646654Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"RHSA-2016:2750","title":"Red Hat Security Advisory: rh-php56 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:38:00Z","modified":"2026-08-05T10:04:10Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-4473","description":"/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.","status":"withdrawn","published":"2017-06-08T20:29:00Z","modified":"2025-07-16T07:34:33.028106Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"DLA-628-1","title":"php5 - security update","status":"published","published":"2016-09-18T00:00:00Z","modified":"2026-03-09T02:09:10.764984Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"SUSE-SU-2016:2460-1","title":"Security update for php7","description":"\nThis update for php7 fixes the following security issues:\n\n* CVE-2016-6128: Invalid color index not properly handled [bsc#987580]\n* CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032]\n* CVE-2016-6292: Null pointer dereference in exif_process_user_comment [bsc#991422]\n* CVE-2016-6295: Use after free in SNMP with GC and unserialize() [bsc#991424]\n* CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener [bsc#991426]\n* CVE-2016-6291: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE [bsc#991427]\n* CVE-2016-6289: Integer overflow leads to buffer overflow in virtual_file_ex [bsc#991428]\n* CVE-2016-6290: Use after free in unserialize() with Unexpected Session Deserialization [bsc#991429]\n* CVE-2016-5399: Improper error handling in bzread() [bsc#991430]\n* CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c [bsc#991437]\n* CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991434]\n* CVE-2016-4473: Invalid free() instead of efree() in phar_extract_file()\n* CVE-2016-7124: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization\n* CVE-2016-7125: PHP Session Data Injection Vulnerability\n* CVE-2016-7126: select_colors write out-of-bounds\n* CVE-2016-7127: imagegammacorrect allowed arbitrary write access\n* CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF\n* CVE-2016-7129: wddx_deserialize allowed illegal memory access\n* CVE-2016-7131: wddx_deserialize null dereference with invalid xml\n* CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element\n* CVE-2016-7133: memory allocator fails to realloc small block to large one\n* CVE-2016-7134: Heap overflow in the function curl_escape\n* CVE-2016-7130: wddx_deserialize null dereference\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n","status":"published","published":"2016-10-05T15:19:24Z","modified":"2026-02-04T04:33:21.660597Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2460-2","title":"Security update for php7","description":"\nThis update for php7 fixes the following security issues:\n\n* CVE-2016-6128: Invalid color index not properly handled [bsc#987580]\n* CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032]\n* CVE-2016-6292: Null pointer dereference in exif_process_user_comment [bsc#991422]\n* CVE-2016-6295: Use after free in SNMP with GC and unserialize() [bsc#991424]\n* CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener [bsc#991426]\n* CVE-2016-6291: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE [bsc#991427]\n* CVE-2016-6289: Integer overflow leads to buffer overflow in virtual_file_ex [bsc#991428]\n* CVE-2016-6290: Use after free in unserialize() with Unexpected Session Deserialization [bsc#991429]\n* CVE-2016-5399: Improper error handling in bzread() [bsc#991430]\n* CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c [bsc#991437]\n* CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991434]\n* CVE-2016-4473: Invalid free() instead of efree() in phar_extract_file()\n* CVE-2016-7124: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization\n* CVE-2016-7125: PHP Session Data Injection Vulnerability\n* CVE-2016-7126: select_colors write out-of-bounds\n* CVE-2016-7127: imagegammacorrect allowed arbitrary write access\n* CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF\n* CVE-2016-7129: wddx_deserialize allowed illegal memory access\n* CVE-2016-7131: wddx_deserialize null dereference with invalid xml\n* CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element\n* CVE-2016-7133: memory allocator fails to realloc small block to large one\n* CVE-2016-7134: Heap overflow in the function curl_escape\n* CVE-2016-7130: wddx_deserialize null dereference\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n","status":"published","published":"2016-10-05T15:19:17Z","modified":"2026-02-04T03:47:31.22726Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}