CVE-2016-3185

The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.

CVSS v3 7.1 HIGH
CVSS v2.0 6.4 MEDIUM

7.1^/10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

6.4^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html
http://php.net/ChangeLog-5.php
http://php.net/ChangeLog-7.php
http://www.securityfocus.com/bid/84307
http://www.ubuntu.com/usn/USN-2952-1
http://www.ubuntu.com/usn/USN-2952-2
https://bugs.php.net/bug.php?id=70081
https://bugs.php.net/bug.php?id=71610
https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html
http://php.net/ChangeLog-5.php
http://php.net/ChangeLog-7.php
http://www.securityfocus.com/bid/84307
http://www.ubuntu.com/usn/USN-2952-1
http://www.ubuntu.com/usn/USN-2952-2
https://bugs.php.net/bug.php?id=70081
https://bugs.php.net/bug.php?id=71610
https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:php:php:5.6.0:alpha1::::::
	cpe:2.3:a:php:php:5.6.0:alpha2::::::
	cpe:2.3:a:php:php:5.6.0:alpha3::::::
	cpe:2.3:a:php:php:5.6.0:alpha4::::::
	cpe:2.3:a:php:php:5.6.0:alpha5::::::
	cpe:2.3:a:php:php:5.6.0:beta1::::::
	cpe:2.3:a:php:php:5.6.0:beta2::::::
	cpe:2.3:a:php:php:5.6.0:beta3::::::
	cpe:2.3:a:php:php:5.6.0:beta4::::::
	cpe:2.3:a:php:php:5.6.1:::::::*
	cpe:2.3:a:php:php:5.6.2:::::::*
	cpe:2.3:a:php:php:5.6.3:::::::*
	cpe:2.3:a:php:php:5.6.4:::::::*
	cpe:2.3:a:php:php:5.6.5:::::::*
	cpe:2.3:a:php:php:5.6.6:::::::*
	cpe:2.3:a:php:php:5.6.7:::::::*
	cpe:2.3:a:php:php:5.6.8:::::::*
	cpe:2.3:a:php:php:5.6.9:::::::*
	cpe:2.3:a:php:php:5.6.10:::::::*
	cpe:2.3:a:php:php:5.6.11:::::::*

Configuration 2 (hide)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Configuration 3 (hide)

OR	cpe:2.3:a:php:php:7.0.0:::::::*
	cpe:2.3:a:php:php:7.0.1:::::::*
	cpe:2.3:a:php:php:7.0.2:::::::*
	cpe:2.3:a:php:php:7.0.3:::::::*

Configuration 4 (hide)

OR	cpe:2.3:a:php:php:5.5.0:::::::*
	cpe:2.3:a:php:php:5.5.0:alpha1::::::
	cpe:2.3:a:php:php:5.5.0:alpha2::::::
	cpe:2.3:a:php:php:5.5.0:alpha3::::::
	cpe:2.3:a:php:php:5.5.0:alpha4::::::
	cpe:2.3:a:php:php:5.5.0:alpha5::::::
	cpe:2.3:a:php:php:5.5.0:alpha6::::::
	cpe:2.3:a:php:php:5.5.0:beta1::::::
	cpe:2.3:a:php:php:5.5.0:beta2::::::
	cpe:2.3:a:php:php:5.5.0:beta3::::::
	cpe:2.3:a:php:php:5.5.0:beta4::::::
	cpe:2.3:a:php:php:5.5.0:rc1::::::
	cpe:2.3:a:php:php:5.5.0:rc2::::::
	cpe:2.3:a:php:php:5.5.1:::::::*
	cpe:2.3:a:php:php:5.5.2:::::::*
	cpe:2.3:a:php:php:5.5.3:::::::*
	cpe:2.3:a:php:php:5.5.4:::::::*
	cpe:2.3:a:php:php:5.5.5:::::::*
	cpe:2.3:a:php:php:5.5.6:::::::*
	cpe:2.3:a:php:php:5.5.7:::::::*
	cpe:2.3:a:php:php:5.5.8:::::::*
	cpe:2.3:a:php:php:5.5.9:::::::*
	cpe:2.3:a:php:php:5.5.10:::::::*
	cpe:2.3:a:php:php:5.5.11:::::::*
	cpe:2.3:a:php:php:5.5.12:::::::*
	cpe:2.3:a:php:php:5.5.13:::::::*
	cpe:2.3:a:php:php:5.5.14:::::::*
	cpe:2.3:a:php:php:5.5.15:::::::*
	cpe:2.3:a:php:php:5.5.16:::::::*
	cpe:2.3:a:php:php:5.5.17:::::::*
	cpe:2.3:a:php:php:5.5.18:::::::*
	cpe:2.3:a:php:php:5.5.19:::::::*
	cpe:2.3:a:php:php:5.5.20:::::::*
	cpe:2.3:a:php:php:5.5.21:::::::*
	cpe:2.3:a:php:php:5.5.22:::::::*
	cpe:2.3:a:php:php:5.5.23:::::::*
	cpe:2.3:a:php:php:5.5.24:::::::*
	cpe:2.3:a:php:php:5.5.25:::::::*
	cpe:2.3:a:php:php:5.5.26:::::::*
	cpe:2.3:a:php:php:5.5.27:::::::*

History

21 Nov 2024, 02:49

Type	Values Removed	Values Added
References	~~() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html -
References	~~() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html -
References	~~() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html -
References	~~() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html -
References	~~() http://php.net/ChangeLog-5.php -~~	() http://php.net/ChangeLog-5.php -
References	~~() http://php.net/ChangeLog-7.php -~~	() http://php.net/ChangeLog-7.php -
References	~~() http://www.securityfocus.com/bid/84307 -~~	() http://www.securityfocus.com/bid/84307 -
References	~~() http://www.ubuntu.com/usn/USN-2952-1 -~~	() http://www.ubuntu.com/usn/USN-2952-1 -
References	~~() http://www.ubuntu.com/usn/USN-2952-2 -~~	() http://www.ubuntu.com/usn/USN-2952-2 -
References	~~() https://bugs.php.net/bug.php?id=70081 -~~	() https://bugs.php.net/bug.php?id=70081 -
References	~~() https://bugs.php.net/bug.php?id=71610 -~~	() https://bugs.php.net/bug.php?id=71610 -
References	~~() https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba -~~	() https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba -

07 Nov 2023, 02:32

Type	Values Removed	Values Added
References	{'url': 'https://git.php.net/?p=php-src.git;a=commit;h=eaf4e77190d402ea014207e9a7d5da1a4f3727ba', 'name': 'https://git.php.net/?p=php-src.git;a=commit;h=eaf4e77190d402ea014207e9a7d5da1a4f3727ba', 'tags': [], 'refsource': 'CONFIRM'}	() https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba -
References	~~(CONFIRM) https://bugs.php.net/bug.php?id=70081 - Exploit~~	() https://bugs.php.net/bug.php?id=70081 -
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html -
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html -
References	~~(CONFIRM) https://bugs.php.net/bug.php?id=71610 - Exploit~~	() https://bugs.php.net/bug.php?id=71610 -
References	~~(UBUNTU) http://www.ubuntu.com/usn/USN-2952-2 -~~	() http://www.ubuntu.com/usn/USN-2952-2 -
References	~~(CONFIRM) http://php.net/ChangeLog-7.php -~~	() http://php.net/ChangeLog-7.php -
References	~~(UBUNTU) http://www.ubuntu.com/usn/USN-2952-1 -~~	() http://www.ubuntu.com/usn/USN-2952-1 -
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html -
References	~~(BID) http://www.securityfocus.com/bid/84307 -~~	() http://www.securityfocus.com/bid/84307 -
References	~~(CONFIRM) http://php.net/ChangeLog-5.php -~~	() http://php.net/ChangeLog-5.php -
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html -

Information

Published : 2016-05-16 10:59

Updated : 2025-04-12 10:46

NVD link : CVE-2016-3185

Mitre link : CVE-2016-3185

CVE.ORG link : CVE-2016-3185

JSON object : View

Products Affected

php

CWE

CWE-20

Improper Input Validation

7.1 /10

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

6.4 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

JSON object

Attach tags to CVE-2016-3185

7.1^/10

6.4^/10

Attach tags to `CVE-2016-3185`