NetSight
IP …
critical9.8

CVE-2016-5770

Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attack…

Impact

Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096.

Affected products

VendorProductAffected versions
PhpPhp
before 5.5.37
from 5.6.0 before 5.6.23
from 7.0.0 before 7.0.8
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
DebianDebian Linux
Version 8.0

Weakness classification

CWE-190

References