Vulnetix
Try Vulnetix Request Demo
CVE-2016-4346 REJECTED

Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.

EPSS 0.85% · 74.8th percentile

Risk Scores

EPSS Score
0.85%
74.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSphp50, 5.5.3+dfsg-1ubuntu2, 5.5.3+dfsg-1ubuntu3
Ubuntu:16.04:LTSphp7.00, 7.0.1-5, 7.0.1-6

Timeline

References

Open in Interactive Console →