CVE-2016-4346

CRITICAL

PHP < 7.0.4 - Integer Overflow in str_pad Function

Title source: llm

Description

Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.

References (5)

Core 5

Core References

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html

Exploit, Issue Tracking, Patch, Vendor Advisory x_refsource_confirm

https://bugs.php.net/bug.php?id=71637

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2016/04/28/2

Release Notes, Vendor Advisory x_refsource_confirm

http://php.net/ChangeLog-7.php

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html

Scores

CVSS v3 9.8

EPSS 0.0085

EPSS Percentile 75.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190

Status published

Products (3)

opensuse/leap 42.1

opensuse/opensuse 13.2

php/php 7.0.0 - 7.0.4

Published May 22, 2016

Tracked Since Feb 18, 2026