Vulnetix
Try Vulnetix Request Demo
CVE-2016-7129 PUBLISHED

The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document.

EPSS 1.86% · 82.9th percentile

Risk Scores

EPSS Score
1.86%
82.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSphp50, 5.5.3+dfsg-1ubuntu2, 5.5.3+dfsg-1ubuntu3
Ubuntu:16.04:LTSphp7.00, 7.0.1-5, 7.0.1-6

Timeline

References

Open in Interactive Console →