CVE-2016-7413
high-risk
Published 2016-09-17
Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call.
Do I need to act?
~
1.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: b88393f08a558eec14964a55d3c680fe67407712
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Vendors
References (20)
Release Notes
http://www.php.net/ChangeLog-5.php
Release Notes
http://www.php.net/ChangeLog-7.php
Release Notes
http://www.php.net/ChangeLog-5.php
Release Notes
http://www.php.net/ChangeLog-7.php
53
/ 100
high-risk
Severity
32/34 · Critical
Exploitability
4/34 · Minimal
Exposure
17/34 · Moderate