Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2016-2554
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-16 May, 2016 | 10:59
Updated At-12 Apr, 2025 | 10:46

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.09.8CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary2.010.0HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
CPE Matches
The PHP Group
php
>>php>>7.0.0
cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*
The PHP Group
php
>>php>>7.0.1
cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*
The PHP Group
php
>>php>>7.0.2
cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*
The PHP Group
php
>>php>>Versions up to 5.5.31(inclusive)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.0
cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.1
cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.2
cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.3
cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.4
cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.5
cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.6
cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.7
cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.8
cpe:2.3:a:php:php:5.6.8:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.9
cpe:2.3:a:php:php:5.6.9:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.10
cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.11
cpe:2.3:a:php:php:5.6.11:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.12
cpe:2.3:a:php:php:5.6.12:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.13
cpe:2.3:a:php:php:5.6.13:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.14
cpe:2.3:a:php:php:5.6.14:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.15
cpe:2.3:a:php:php:5.6.15:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.16
cpe:2.3:a:php:php:5.6.16:*:*:*:*:*:*:*
The PHP Group
php
>>php>>5.6.17
cpe:2.3:a:php:php:5.6.17:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-119Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.htmlcve@mitre.org
N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.htmlcve@mitre.org
N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.htmlcve@mitre.org
N/A
http://php.net/ChangeLog-5.phpcve@mitre.org
N/A
http://php.net/ChangeLog-7.phpcve@mitre.org
N/A
http://rhn.redhat.com/errata/RHSA-2016-2750.htmlcve@mitre.org
N/A
http://www.ubuntu.com/usn/USN-2952-1cve@mitre.org
N/A
http://www.ubuntu.com/usn/USN-2952-2cve@mitre.org
N/A
https://bugs.php.net/bug.php?id=71488cve@mitre.org
Exploit
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731cve@mitre.org
N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://php.net/ChangeLog-5.phpaf854a3a-2127-422b-91ae-364da2661108
N/A
http://php.net/ChangeLog-7.phpaf854a3a-2127-422b-91ae-364da2661108
N/A
http://rhn.redhat.com/errata/RHSA-2016-2750.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.ubuntu.com/usn/USN-2952-1af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.ubuntu.com/usn/USN-2952-2af854a3a-2127-422b-91ae-364da2661108
N/A
https://bugs.php.net/bug.php?id=71488af854a3a-2127-422b-91ae-364da2661108
Exploit
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731af854a3a-2127-422b-91ae-364da2661108
N/A
Change History
0Changes found
Details not found