CVE-2016-5772

Published: Aug 7, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call.

Affected (9)

Products: Php: Php · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Server, Linux Enterprise Software Development Kit · +1 more

Show all products

Php: Php · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Server, Linux Enterprise Software Development Kit · Debian: Debian Linux

1 product

2 products

3 products

Linux Enterprise Debuginfo

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	Before 5.5.37
Php Php	From 5.6.0 to 5.6.23
Php Php	From 7.0.0 to 7.0.8

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Debuginfo	Version 11 sp4
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Software Development Kit	Version 11 sp4

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Related CWEs

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (28)

http://github.com/php/php-src/commit/a44c89e8af7c2410f4bfc5e097be2a5d0639a60c?w=1

Source: cve@mitre.org

PatchThird Party Advisory

http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html

Source: cve@mitre.org

Broken LinkMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://php.net/ChangeLog-5.php

Source: cve@mitre.org

PatchRelease NotesVendor Advisory

http://php.net/ChangeLog-7.php

Source: cve@mitre.org

Release NotesVendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-2750.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3618

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/06/23/4

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/91398

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugs.php.net/bug.php?id=72340

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/HT207170

Source: cve@mitre.org

Third Party Advisory

http://github.com/php/php-src/commit/a44c89e8af7c2410f4bfc5e097be2a5d0639a60c?w=1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://php.net/ChangeLog-5.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchRelease NotesVendor Advisory

http://php.net/ChangeLog-7.php

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-2750.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2016/dsa-3618

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/06/23/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/91398

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bugs.php.net/bug.php?id=72340

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/HT207170

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.