CVE-2016-7478

Name
CVE-2016-7478
Description
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
NVD Severity
unknown
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Third Party Advisory http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7
Third Party Advisory http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf
cve@checkpoint.com http://www.securityfocus.com/bid/95150
Exploit https://bugs.php.net/bug.php?id=73093
cve@checkpoint.com https://security.netapp.com/advisory/ntap-20180112-0001/
Press/Media Coverage https://www.youtube.com/watch?v=LDcaPstAuPk

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:* php == None == 5.0.0
cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:* php == None == 5.0.1
cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:* php == None == 5.0.2
cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:* php == None == 5.0.3
cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:* php == None == 5.0.4
cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:* php == None == 5.0.5
cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:* php == None == 5.1.0
cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:* php == None == 5.1.1
cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:* php == None == 5.1.2
cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:* php == None == 5.1.3
cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:* php == None == 5.1.4
cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:* php == None == 5.1.5
cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:* php == None == 5.1.6
cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:* php == None == 5.2.0
cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:* php == None == 5.2.1
cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:* php == None == 5.2.2
cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:* php == None == 5.2.3
cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:* php == None == 5.2.4
cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:* php == None == 5.2.5
cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:* php == None == 5.2.6
cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:* php == None == 5.2.7
cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:* php == None == 5.2.8
cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:* php == None == 5.2.9
cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:* php == None == 5.2.10
cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:* php == None == 5.2.11
cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:* php == None == 5.2.12
cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:* php == None == 5.2.13
cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:* php == None == 5.2.14
cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:* php == None == 5.2.15
cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:* php == None == 5.2.16
cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:* php == None == 5.2.17
cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:* php == None == 5.3.0
cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:* php == None == 5.3.1
cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:* php == None == 5.3.2
cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:* php == None == 5.3.3
cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:* php == None == 5.3.4
cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:* php == None == 5.3.5
cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:* php == None == 5.3.6
cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:* php == None == 5.3.7
cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:* php == None == 5.3.8
cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:* php == None == 5.3.9
cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:* php == None == 5.3.10
cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:* php == None == 5.3.11
cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:* php == None == 5.3.12
cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:* php == None == 5.3.13
cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:* php == None == 5.3.14
cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:* php == None == 5.3.15
cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:* php == None == 5.3.16
cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:* php == None == 5.3.17
cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:* php == None == 5.3.18
cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:* php == None == 5.3.19
cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:* php == None == 5.3.20
cpe:2.3:a:php:php:5.3.21:*:*:*:*:*:*:* php == None == 5.3.21
cpe:2.3:a:php:php:5.3.22:*:*:*:*:*:*:* php == None == 5.3.22
cpe:2.3:a:php:php:5.3.23:*:*:*:*:*:*:* php == None == 5.3.23
cpe:2.3:a:php:php:5.3.24:*:*:*:*:*:*:* php == None == 5.3.24
cpe:2.3:a:php:php:5.3.25:*:*:*:*:*:*:* php == None == 5.3.25
cpe:2.3:a:php:php:5.3.26:*:*:*:*:*:*:* php == None == 5.3.26
cpe:2.3:a:php:php:5.3.27:*:*:*:*:*:*:* php == None == 5.3.27
cpe:2.3:a:php:php:5.3.28:*:*:*:*:*:*:* php == None == 5.3.28
cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:* php == None == 5.4.0
cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:* php == None == 5.4.1
cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:* php == None == 5.4.2
cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:* php == None == 5.4.3
cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:* php == None == 5.4.4
cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:* php == None == 5.4.5
cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:* php == None == 5.4.6
cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:* php == None == 5.4.7
cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:* php == None == 5.4.8
cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:* php == None == 5.4.9
cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:* php == None == 5.4.10
cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:* php == None == 5.4.11
cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:* php == None == 5.4.12
cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:* php == None == 5.4.13
cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:* php == None == 5.4.14
cpe:2.3:a:php:php:5.4.15:*:*:*:*:*:*:* php == None == 5.4.15
cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:* php == None == 5.4.16
cpe:2.3:a:php:php:5.4.17:*:*:*:*:*:*:* php == None == 5.4.17
cpe:2.3:a:php:php:5.4.18:*:*:*:*:*:*:* php == None == 5.4.18
cpe:2.3:a:php:php:5.4.19:*:*:*:*:*:*:* php == None == 5.4.19
cpe:2.3:a:php:php:5.4.20:*:*:*:*:*:*:* php == None == 5.4.20
cpe:2.3:a:php:php:5.4.21:*:*:*:*:*:*:* php == None == 5.4.21
cpe:2.3:a:php:php:5.4.22:*:*:*:*:*:*:* php == None == 5.4.22
cpe:2.3:a:php:php:5.4.23:*:*:*:*:*:*:* php == None == 5.4.23
cpe:2.3:a:php:php:5.4.24:*:*:*:*:*:*:* php == None == 5.4.24
cpe:2.3:a:php:php:5.4.25:*:*:*:*:*:*:* php == None == 5.4.25
cpe:2.3:a:php:php:5.4.26:*:*:*:*:*:*:* php == None == 5.4.26
cpe:2.3:a:php:php:5.4.27:*:*:*:*:*:*:* php == None == 5.4.27
cpe:2.3:a:php:php:5.4.28:*:*:*:*:*:*:* php == None == 5.4.28
cpe:2.3:a:php:php:5.4.29:*:*:*:*:*:*:* php == None == 5.4.29
cpe:2.3:a:php:php:5.4.30:*:*:*:*:*:*:* php == None == 5.4.30
cpe:2.3:a:php:php:5.4.34:*:*:*:*:*:*:* php == None == 5.4.34
cpe:2.3:a:php:php:5.4.35:*:*:*:*:*:*:* php == None == 5.4.35
cpe:2.3:a:php:php:5.4.37:*:*:*:*:*:*:* php == None == 5.4.37
cpe:2.3:a:php:php:5.4.38:*:*:*:*:*:*:* php == None == 5.4.38
cpe:2.3:a:php:php:5.4.39:*:*:*:*:*:*:* php == None == 5.4.39
cpe:2.3:a:php:php:5.4.41:*:*:*:*:*:*:* php == None == 5.4.41
cpe:2.3:a:php:php:5.4.42:*:*:*:*:*:*:* php == None == 5.4.42
cpe:2.3:a:php:php:5.4.43:*:*:*:*:*:*:* php == None == 5.4.43
cpe:2.3:a:php:php:5.4.44:*:*:*:*:*:*:* php == None == 5.4.44
cpe:2.3:a:php:php:5.4.45:*:*:*:*:*:*:* php == None == 5.4.45
cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:* php == None == 5.5.0
cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:* php == None == 5.5.1
cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:* php == None == 5.5.2
cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:* php == None == 5.5.3
cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:* php == None == 5.5.4
cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:* php == None == 5.5.5
cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:* php == None == 5.5.6
cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:* php == None == 5.5.7
cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:* php == None == 5.5.8
cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:* php == None == 5.5.9
cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:* php == None == 5.5.10
cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:* php == None == 5.5.11
cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:* php == None == 5.5.12
cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:* php == None == 5.5.13
cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:* php == None == 5.5.14
cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:* php == None == 5.5.18
cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:* php == None == 5.5.19
cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:* php == None == 5.5.20
cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:* php == None == 5.5.21
cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:* php == None == 5.5.22
cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:* php == None == 5.5.23
cpe:2.3:a:php:php:5.5.24:*:*:*:*:*:*:* php == None == 5.5.24
cpe:2.3:a:php:php:5.5.25:*:*:*:*:*:*:* php == None == 5.5.25
cpe:2.3:a:php:php:5.5.26:*:*:*:*:*:*:* php == None == 5.5.26
cpe:2.3:a:php:php:5.5.27:*:*:*:*:*:*:* php == None == 5.5.27
cpe:2.3:a:php:php:5.5.28:*:*:*:*:*:*:* php == None == 5.5.28
cpe:2.3:a:php:php:5.5.29:*:*:*:*:*:*:* php == None == 5.5.29
cpe:2.3:a:php:php:5.5.30:*:*:*:*:*:*:* php == None == 5.5.30
cpe:2.3:a:php:php:5.5.31:*:*:*:*:*:*:* php == None == 5.5.31
cpe:2.3:a:php:php:5.5.32:*:*:*:*:*:*:* php == None == 5.5.32
cpe:2.3:a:php:php:5.5.33:*:*:*:*:*:*:* php == None == 5.5.33
cpe:2.3:a:php:php:5.5.34:*:*:*:*:*:*:* php == None == 5.5.34
cpe:2.3:a:php:php:5.5.35:*:*:*:*:*:*:* php == None == 5.5.35
cpe:2.3:a:php:php:5.5.36:*:*:*:*:*:*:* php == None == 5.5.36
cpe:2.3:a:php:php:5.5.37:*:*:*:*:*:*:* php == None == 5.5.37
cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:* php == None == 5.6.0
cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:* php == None == 5.6.1
cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:* php == None == 5.6.2
cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:* php == None == 5.6.10
cpe:2.3:a:php:php:5.6.11:*:*:*:*:*:*:* php == None == 5.6.11
cpe:2.3:a:php:php:5.6.12:*:*:*:*:*:*:* php == None == 5.6.12
cpe:2.3:a:php:php:5.6.13:*:*:*:*:*:*:* php == None == 5.6.13
cpe:2.3:a:php:php:5.6.14:*:*:*:*:*:*:* php == None == 5.6.14
cpe:2.3:a:php:php:5.6.15:*:*:*:*:*:*:* php == None == 5.6.15
cpe:2.3:a:php:php:5.6.16:*:*:*:*:*:*:* php == None == 5.6.16
cpe:2.3:a:php:php:5.6.17:*:*:*:*:*:*:* php == None == 5.6.17
cpe:2.3:a:php:php:5.6.18:*:*:*:*:*:*:* php == None == 5.6.18
cpe:2.3:a:php:php:5.6.19:*:*:*:*:*:*:* php == None == 5.6.19
cpe:2.3:a:php:php:5.6.20:*:*:*:*:*:*:* php == None == 5.6.20
cpe:2.3:a:php:php:5.6.21:*:*:*:*:*:*:* php == None == 5.6.21
cpe:2.3:a:php:php:5.6.22:*:*:*:*:*:*:* php == None == 5.6.22
cpe:2.3:a:php:php:5.6.23:*:*:*:*:*:*:* php == None == 5.6.23
cpe:2.3:a:php:php:5.6.24:*:*:*:*:*:*:* php == None == 5.6.24
cpe:2.3:a:php:php:5.6.25:*:*:*:*:*:*:* php == None == 5.6.25
cpe:2.3:a:php:php:5.6.26:*:*:*:*:*:*:* php == None == 5.6.26
cpe:2.3:a:php:php:5.6.27:*:*:*:*:*:*:* php == None == 5.6.27
cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:* php == None == 7.0.0
cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:* php == None == 7.0.1
cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:* php == None == 7.0.2
cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:* php == None == 7.0.3
cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:* php == None == 7.0.4
cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:* php == None == 7.0.5
cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:* php == None == 7.0.6
cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:* php == None == 7.0.7
cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:* php == None == 7.0.8
cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:* php == None == 7.0.9
cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:* php == None == 7.0.10
cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:* php == None == 7.0.11
cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:* php == None == 7.0.12

Vulnerable and fixed packages

Source package Branch Version Maintainer Status