UBUNTU-CVE-2016-4070

Dashboard / Vulnerabilities / UBUNTU-CVE-2016-4070

UBUNTU-CVE-2016-4070

Summary:

Details: Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service (application crash) via a long string to the rawurlencode function. NOTE: the vendor says "Not sure if this qualifies as security issue (probably not).

References: https://ubuntu.com/security/CVE-2016-4070, http://www.openwall.com/lists/oss-security/2016/04/11/7, https://ubuntu.com/security/notices/USN-2952-1, https://ubuntu.com/security/notices/USN-2984-1, https://www.cve.org/CVERecord?id=CVE-2016-4070