{"id":"CVE-2016-7411","aliases":["ALPINE-CVE-2016-7411","DLA-749-1","DSA-3689-1","EUVD-2016-8264","GHSA-chxh-4r5m-9x52","MGASA-2016-0319","SUSE-SU-2016:2459-1","SUSE-SU-2016:2461-1","SUSE-SU-2016:2477-1","SUSE-SU-2016:2477-2","UBUNTU-CVE-2016-7411","USN-3095-1"],"status":"published","title":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures,...","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05649,"percentile":0.93017,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-09-17T00:00:00Z","modified":"2026-10-20T13:17:07Z","fixes":[{"ecosystem":"Alpine:v3.2","package":"php","fixed_in":["5.6.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"php","fixed_in":["5.6.27-r0"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.20"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.2","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.27-r0"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.45-0+deb7u6"}]}],"versions":["5.4.11-1","5.4.15-1","5.4.34-0+deb7u1","5.4.35-0+deb7u1","5.4.35-0+deb7u2","5.4.36-0+deb7u1","5.4.36-0+deb7u3","5.4.38-0+deb7u1","5.4.39-0+deb7u1","5.4.39-0+deb7u2","5.4.4-14","5.4.4-14+deb7u1","5.4.4-14+deb7u10","5.4.4-14+deb7u11","5.4.4-14+deb7u12","5.4.4-14+deb7u13","5.4.4-14+deb7u14","5.4.4-14+deb7u2","5.4.4-14+deb7u3","5.4.4-14+deb7u4","5.4.4-14+deb7u5","5.4.4-14+deb7u7","5.4.4-14+deb7u8","5.4.4-14+deb7u9","5.4.4-15","5.4.4-15.1","5.4.41-0+deb7u1","5.4.44-0+deb7u1","5.4.45-0+deb7u1","5.4.45-0+deb7u2","5.4.45-0+deb7u3","5.4.45-0+deb7u4","5.4.45-0+deb7u5","5.4.6-1","5.4.6-2","5.4.8-1","5.4.9-1","5.4.9-2","5.4.9-3","5.4.9-4"],"bundled":14},{"source":"osv","ecosystem":"Debian:8","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.26+dfsg-0+deb8u1"}]}],"versions":["5.6.11+dfsg-1","5.6.12+dfsg-0+deb8u1","5.6.12+dfsg-1","5.6.13+dfsg-0+deb8u1","5.6.13+dfsg-1","5.6.13+dfsg-2","5.6.14+dfsg-0+deb8u1","5.6.14+dfsg-1","5.6.15+dfsg-1","5.6.16+dfsg-1","5.6.16+dfsg-2","5.6.16+dfsg-3","5.6.16+dfsg-4","5.6.17+dfsg-0+deb8u1","5.6.17+dfsg-1","5.6.17+dfsg-3","5.6.18+dfsg-1","5.6.19+dfsg-0+deb8u1","5.6.19+dfsg-1","5.6.19+dfsg-2","5.6.20+dfsg-0+deb8u1","5.6.20+dfsg-1","5.6.21+dfsg-1","5.6.21+dfsg-2","5.6.22+dfsg-0+deb8u1","5.6.22+dfsg-1","5.6.22+dfsg-2","5.6.23+dfsg-0+deb8u1","5.6.23+dfsg-1","5.6.24+dfsg-0+deb8u1","5.6.24+dfsg-1","5.6.7+dfsg-1","5.6.9+dfsg-0+deb8u1","5.6.9+dfsg-1"],"bundled":16},{"source":"osv","ecosystem":"Mageia:5","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.26-1.mga5"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-84.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-58.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.20"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.20"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19"],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-0ubuntu0.16.04.3"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2"],"bundled":17}],"products":[{"vendor":"php","product":"php"}],"references":[{"url":"https://security.gentoo.org/glsa/201611-22","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1036836","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://bugs.php.net/bug.php?id=73052","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/15/10","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://github.com/php/php-src/commit/6a7cc8ff85827fa9ac715b3a83c2d9147f33cd43?w=1","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix"]},{"url":"http://www.php.net/ChangeLog-5.php","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"http://www.securityfocus.com/bid/93009","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7411"},{"url":"https://github.com/advisories/GHSA-chxh-4r5m-9x52"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-7411","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0319.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19368","tags":["report"]},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7411","tags":["advisory"]},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7412","tags":["advisory"]},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7413","tags":["advisory"]},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7414","tags":["advisory"]},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7416","tags":["advisory"]},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7417","tags":["advisory"]},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7418","tags":["advisory"]},{"url":"http://www.php.net/ChangeLog-5.php#5.6.26","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162459-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/997206","tags":["report"]},{"url":"https://bugzilla.suse.com/997207","tags":["report"]},{"url":"https://bugzilla.suse.com/997208","tags":["report"]},{"url":"https://bugzilla.suse.com/997210","tags":["report"]},{"url":"https://bugzilla.suse.com/997211","tags":["report"]},{"url":"https://bugzilla.suse.com/997220","tags":["report"]},{"url":"https://bugzilla.suse.com/997225","tags":["report"]},{"url":"https://bugzilla.suse.com/997230","tags":["report"]},{"url":"https://bugzilla.suse.com/997257","tags":["report"]},{"url":"https://bugzilla.suse.com/999679","tags":["report"]},{"url":"https://bugzilla.suse.com/999680","tags":["report"]},{"url":"https://bugzilla.suse.com/999682","tags":["report"]},{"url":"https://bugzilla.suse.com/999684","tags":["report"]},{"url":"https://bugzilla.suse.com/999685","tags":["report"]},{"url":"https://bugzilla.suse.com/999819","tags":["report"]},{"url":"https://bugzilla.suse.com/999820","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162461-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162477-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162477-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-7411","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/15/6","tags":["report"]},{"url":"http://php.net/ChangeLog-5.php#5.6.26","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3095-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7418","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-7411","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","status":"published","published":"2016-09-17T21:00:00Z","modified":"2024-08-06T01:57:47.609Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-8264","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","status":"published","published":"2016-09-17T21:00:00Z","modified":"2024-08-06T01:57:47Z","updated_at":"2026-11-03T02:22:32.939633Z"}],"ghsa":[{"id":"GHSA-chxh-4r5m-9x52","title":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures,...","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","status":"published","published":"2022-05-17T02:21:02Z","modified":"2023-01-27T05:04:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:42:28.374431Z"}],"nvd":[{"id":"CVE-2016-7411","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","status":"published","published":"2016-09-17T21:59:02.573Z","modified":"2026-06-17T00:53:00.877Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:29.893676Z"}],"osv":[{"id":"ALPINE-CVE-2016-7411","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","status":"published","published":"2016-09-17T21:59:02.573Z","modified":"2026-09-22T06:30:35.251206087Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2016-7411","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","status":"published","published":"2016-09-17T21:59:02.573Z","modified":"2026-10-20T13:17:07.06204735Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"UBUNTU-CVE-2016-7411","description":"ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.","status":"published","published":"2016-09-17T00:00:00Z","modified":"2026-04-22T10:56:38.805744Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"DLA-749-1","title":"php5 - security update","status":"published","published":"2016-12-16T00:00:00Z","modified":"2026-03-09T02:10:31.047914Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3689-1","title":"php5 - security update","status":"published","published":"2016-10-08T00:00:00Z","modified":"2026-03-09T01:23:26.251643Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0319","title":"Updated php packages fix security vulnerabilities","description":"Memory Corruption in During Deserialized-object Destruction) (CVE-2016-7411).\n\nHeap overflow in mysqlnd related to BIT fields) (CVE-2016-7412).\n\nwddx_deserialize use-after-free (CVE-2016-7413).\n\nOut of bound when verify signature of zip phar in phar_parse_zipfile)\n(CVE-2016-7414).\n\nMissing locale length check in php-intl (CVE-2016-7416).\n\nMissing type check when unserializing SplArray) (CVE-2016-7417).\n\nOut-Of-Bounds Read in php_wddx_push_element) (CVE-2016-7418).\n\nThe php package has been updated to version 5.6.26, which fixes these issues\nand other bugs.  See the upstream ChangeLog for more details.\n","status":"published","published":"2016-09-25T15:45:31Z","modified":"2026-04-16T06:26:05.314141931Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2016:2459-1","title":"Security update for php53","description":"\nThis update for php53 fixes the following security issues:\n\n* CVE-2016-7124: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization\n* CVE-2016-7125: PHP Session Data Injection Vulnerability\n* CVE-2016-7126: select_colors write out-of-bounds\n* CVE-2016-7127: imagegammacorrect allowed arbitrary write access\n* CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF\n* CVE-2016-7129: wddx_deserialize allows illegal memory access\n* CVE-2016-7130: wddx_deserialize null dereference\n* CVE-2016-7131: wddx_deserialize null dereference with invalid xml\n* CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element\n* CVE-2016-7411: php5: Memory corruption when destructing deserialized object\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n","status":"published","published":"2016-10-05T12:41:55Z","modified":"2026-02-04T03:44:50.31814Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2461-1","title":"Security update for php53","description":"\nThis update for php53 fixes the following issues:\n\n* CVE-2016-7411: php5: Memory corruption when destructing deserialized object\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n","status":"published","published":"2016-10-05T19:46:50Z","modified":"2026-02-04T03:41:08.962783Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2477-1","title":"Security update for php5","description":"\nThis update for php5 fixes the following security issues:\n\n* CVE-2016-7411: php5: Memory corruption when destructing deserialized object\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n","status":"published","published":"2016-10-07T15:15:24Z","modified":"2025-05-02T04:05:31.864432Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2477-2","title":"Security update for php5","description":"\nThis update for php5 fixes the following security issues:\n\n* CVE-2016-7411: php5: Memory corruption when destructing deserialized object\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n","status":"published","published":"2016-10-07T15:15:16Z","modified":"2026-02-04T02:24:11.220301Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3095-1","title":"php5, php7.0 vulnerabilities","description":"Taoguang Chen discovered that PHP incorrectly handled certain invalid\nobjects when unserializing data. A remote attacker could use this issue to\ncause PHP to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2016-7124)\n\nTaoguang Chen discovered that PHP incorrectly handled invalid session\nnames. A remote attacker could use this issue to inject arbitrary session\ndata. (CVE-2016-7125)\n\nIt was discovered that PHP incorrectly handled certain gamma values in the\nimagegammacorrect function. A remote attacker could use this issue to cause\nPHP to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2016-7127)\n\nIt was discovered that PHP incorrectly handled certain crafted TIFF image\nthumbnails. A remote attacker could use this issue to cause PHP to crash,\nresulting in a denial of service, or possibly expose sensitive information.\n(CVE-2016-7128)\n\nIt was discovered that PHP incorrectly handled unserializing certain\nwddxPacket XML documents. A remote attacker could use this issue to cause\nPHP to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2016-7129, CVE-2016-7130, CVE-2016-7131,\nCVE-2016-7132, CVE-2016-7413)\n\nIt was discovered that PHP incorrectly handled certain memory operations. A\nremote attacker could use this issue to cause PHP to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 16.04 LTS. (CVE-2016-7133)\n\nIt was discovered that PHP incorrectly handled long strings in curl_escape\ncalls. A remote attacker could use this issue to cause PHP to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2016-7134)\n\nTaoguang Chen discovered that PHP incorrectly handled certain failures when\nunserializing data. A remote attacker could use this issue to cause PHP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.\n(CVE-2016-7411)\n\nIt was discovered that PHP incorrectly handled certain flags in the MySQL\ndriver. Malicious remote MySQL servers could use this issue to cause PHP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2016-7412)\n\nIt was discovered that PHP incorrectly handled ZIP file signature\nverification when processing a PHAR archive. A remote attacker could use\nthis issue to cause PHP to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2016-7414)\n\nIt was discovered that PHP incorrectly handled certain locale operations. A\nremote attacker could use this issue to cause PHP to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2016-7416)\n\nIt was discovered that PHP incorrectly handled SplArray unserializing. A\nremote attacker could use this issue to cause PHP to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2016-7417)\n\nKe Liu discovered that PHP incorrectly handled unserializing wddxPacket XML\ndocuments with incorrect boolean elements. A remote attacker could use this\nissue to cause PHP to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2016-7418)\n","status":"published","published":"2016-10-04T17:18:27Z","modified":"2026-04-22T09:28:52.179374Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}