deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9898
Published: 2016-08-06
Description: arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and Qualcomm internal bug CR554575.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92222; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=80be0e249c906704085d13d4ae446f73913fc225
CVE: CVE-2014-9899
Published: 2016-08-06
Description: drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28803909 and Qualcomm internal bug CR547910.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92222; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=8756624acb1e090b45baf07b2a8d0ebde114000e
CVE: CVE-2014-9900
Published: 2016-08-06
Description: The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28803952 and Qualcomm internal bug CR570754.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92222; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=63c317dbee97983004dffdd9f742a20d17150071
CVE: CVE-2015-8937
Published: 2016-08-06
Description: drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a socket process, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803962 and Qualcomm internal bug CR770548.
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92219; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=c66202b9288cc4ab1c38f7c928fa1005c285c170
CVE: CVE-2015-8938
Published: 2016-08-06
Description: The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92219; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=51c39420e3a49d1a7f05a77c64369b[PII_REDACTED]
CVE: CVE-2015-8939
Published: 2016-08-06
Description: drivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages, g stages, or b stages data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28398884 and Qualcomm internal bug CR779021.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92219; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=884cff808385788fa620833c7e2160a4b98a21da
CVE: CVE-2015-8940
Published: 2016-08-06
Description: Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28813987 and Qualcomm internal bug CR792367.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92219; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=e13ebd727d161db7003be6756e61283dce85fa3b
CVE: CVE-2015-8941
Published: 2016-08-06
Description: drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices does not properly validate array indexes, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814502 and Qualcomm internal bug CR792473.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92219; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=d4d4d1dd626b21e68e78395bab3382c1eb04877f
CVE: CVE-2015-8942
Published: 2016-08-06
Description: drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate the stream state, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814652 and Qualcomm internal bug CR803246.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92219; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=9ec380c06bbd79493828fcc3c876d8a53fd3369f
CVE: CVE-2015-8943
Published: 2016-08-06
Description: drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 and Qualcomm internal bugs CR794217 and CR836226.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92219; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=ad376e4053b87bd58f62f45b6df2c5544bc21aee
CVE: CVE-2015-8944
Published: 2016-08-06
Description: The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.openwall.com/lists/kernel-hardening/2016/04/06/22; http://www.securityfocus.com/bid/92222
CVE: CVE-2016-3854
Published: 2016-08-06
Description: drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR897326.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92256; https://source.codeaurora.org/quic/la/kernel/msm/commit/?h=LA.AF.1.2.1_rb1.5&id=cc96def76dfd18fba88575065b29f2ae9191fafa
CVE: CVE-2016-3855
Published: 2016-08-06
Description: drivers/thermal/supply_lm_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR990824.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92256; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ab3f46119ca10de87a11fe966b0723c48f27acd4
CVE: CVE-2016-3856
Published: 2016-08-06
Description: netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR959631.
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: http://source.android.com/security/bulletin/2016-08-01.html; http://www.securityfocus.com/bid/92256; https://source.codeaurora.org/quic/la/platform/system/netd/commit/?h=LA.BF64.1.2.1&id=cc2853e6cec8ca2cf92430ad9a83358b131fc417
CVE: CVE-2016-3070
Published: 2016-08-06
Description: The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=42cb14b110a5698ccf26ce59c[PII_REDACTED]a3743; http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html
CVE: CVE-2016-3841
Published: 2016-08-06
Description: The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45f6fad84cc305103b28d73482b344d7f5b76f39; http://rhn.redhat.com/errata/RHSA-2016-0855.html; http://rhn.redhat.com/errata/RHSA-2016-2574.html
CVE: CVE-2016-5400
Published: 2016-08-06
Description: Memory leak in the airspy_probe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service (memory consumption) via a crafted USB device that emulates many VFL_TYPE_SDR or VFL_TYPE_SUBDEV devices and performs many connect and disconnect operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa93d1fee85c890a34f2510a310e55ee76a27848; http://www.openwall.com/lists/oss-security/2016/07/25/1; http://www.securityfocus.com/bid/92104
CVE: CVE-2016-5412
Published: 2016-08-06
Description: arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93d17397e4e2182fdaad503e2f9da46202c0f1c3; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f024ee098476a3e620232e4a78cfac505f121245; http://rhn.redhat.com/errata/RHSA-2016-2574.html
CVE: CVE-2016-5696
Published: 2016-08-06
Description: net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758; http://rhn.redhat.com/errata/RHSA-2016-1631.html; http://rhn.redhat.com/errata/RHSA-2016-1632.html
CVE: CVE-2016-6136
Published: 2016-08-06
Description: Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a "double fetch" vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=43761473c254b45883a64441dd0bc85a42f3645c; http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html
CVE: CVE-2016-6156
Published: 2016-08-06
Description: Race condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in the Linux kernel before 4.7 allows local users to cause a denial of service (out-of-bounds array access) by changing a certain size value, aka a "double fetch" vulnerability.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096cdc6f52225835ff503f987a0d68ef770bb78e; http://seclists.org/bugtraq/2016/Jul/20; http://www.securityfocus.com/bid/91553
CVE: CVE-2016-6162
Published: 2016-08-06
Description: net/core/skbuff.c in the Linux kernel 4.7-rc6 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via certain IPv6 socket operations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/07/05/8; https://bugzilla.redhat.com/show_bug.cgi?id=1353538; http://www.openwall.com/lists/oss-security/2016/07/05/8
CVE: CVE-2016-6187
Published: 2016-08-06
Description: The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30a46a4647fd1df9cf52e43bf467f0d9265096ca; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]1929&w=2; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.5
CVE: CVE-2016-6197
Published: 2016-08-06
Description: fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=11f3710417d026ea2f4fcf362d866342c5274185; http://rhn.redhat.com/errata/RHSA-2016-1847.html; http://rhn.redhat.com/errata/RHSA-2016-1875.html
CVE: CVE-2016-6198
Published: 2016-08-06
Description: The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54d5ca871e72f2bb172ec9323497f01cd5091ec7; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9409e22acdfc9153f88d9b1ed2bd2a5b34d2d3ca; http://rhn.redhat.com/errata/RHSA-2016-1847.html
CVE: CVE-2016-6480
Published: 2016-08-06
Description: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html
CVE: CVE-2016-6516
Published: 2016-08-06
Description: Race condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (heap-based buffer overflow) or possibly gain privileges by changing a certain count value, aka a "double fetch" vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-119, CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=10eec60ce79187686e052092e5383c99b4420a20; http://www.openwall.com/lists/oss-security/2016/07/31/6; http://www.securityfocus.com/bid/92259
CVE: CVE-2016-6503
Published: 2016-08-06
Description: The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.securityfocus.com/bid/92162; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6504
Published: 2016-08-06
Description: epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securityfocus.com/bid/92164
CVE: CVE-2016-6505
Published: 2016-08-06
Description: epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-369
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securityfocus.com/bid/92163
CVE: CVE-2016-6506
Published: 2016-08-06
Description: epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6507
Published: 2016-08-06
Description: epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6508
Published: 2016-08-06
Description: epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6509
Published: 2016-08-06
Description: epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6510
Published: 2016-08-06
Description: Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-189
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6511
Published: 2016-08-06
Description: epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.debian.org/security/2016/dsa-3648; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6512
Published: 2016-08-06
Description: epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.securityfocus.com/bid/92174; http://www.securitytracker.com/id/1036480
CVE: CVE-2016-6513
Published: 2016-08-06
Description: epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2016/07/28/3; http://www.securitytracker.com/id/1036480; http://www.wireshark.org/security/wnpa-sec-2016-49.html
CVE: CVE-2013-7456
Published: 2016-08-07
Description: gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.
CVSS Score: 7.6 (HIGH)
CWE: CWE-125
References: http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php; http://rhn.redhat.com/errata/RHSA-2016-2750.html
CVE: CVE-2015-8935
Published: 2016-08-07
Description: The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
CVE: CVE-2016-3078
Published: 2016-08-07
Description: Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/04/28/1; http://www.securitytracker.com/id/1035701; https://bugs.php.net/bug.php?id=71923
CVE: CVE-2016-3132
Published: 2016-08-07
Description: Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://github.com/php/php-src/commit/28a6ed9f9a36b9c517e4a8a429baf4dd382fc5d5?w=1; http://www.securityfocus.com/bid/92356; https://bugs.php.net/bug.php?id=71735
CVE: CVE-2016-5093
Published: 2016-08-07
Description: The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.
CVSS Score: 8.6 (HIGH)
CWE: CWE-125
References: http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php; http://rhn.redhat.com/errata/RHSA-2016-2750.html