Security Advisory

CVE-2016-7398

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-06 18:46:53

Last updated 2024-08-06 01:57:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests.

← Browse all CVEs View on cve.org ↗