NetSight
IP …
critical9.8

CVE-2016-4541

The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to …

Impact

The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.

Affected products

VendorProductAffected versions
FedoraprojectFedora
Version 24
PhpPhp
through 5.5.34
Versions 5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4
OpensuseLeap
Version 42.1

References