http://packetstormsecurity.com/files/137998/PHP-7.0.8-5.6.23-5.5.37-bzread-OOB-Write.html

http://php.net/ChangeLog-5.php

http://php.net/ChangeLog-7.php

http://rhn.redhat.com/errata/RHSA-2016-2598.html

http://rhn.redhat.com/errata/RHSA-2016-2750.html

http://seclists.org/fulldisclosure/2016/Jul/72

http://www.debian.org/security/2016/dsa-3631

http://www.openwall.com/lists/oss-security/2016/07/21/1

http://www.securityfocus.com/archive/1/538966/100/0/threaded

http://www.securityfocus.com/bid/92051

http://www.securitytracker.com/id/1036430

https://bugs.php.net/bug.php?id=72613

https://bugzilla.redhat.com/show_bug.cgi?id=1358395

https://security.netapp.com/advisory/ntap-20180112-0001/

https://www.exploit-db.com/exploits/40155/

A flaw was found in the way certain error conditions were handled by bzread() function in PHP. An attacker could use this flaw to upload a specially crafted bz2 archive which, when parsed via the vulnerable function, could cause the application to crash or execute arbitrary code with the permissions of the user running the PHP application.

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

Red Hat, Inc. AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Red Hat, Inc. (AV:N/AC:H/Au:N/C:P/I:P/A:P)

https://access.redhat.com/errata/RHSA-2016:2598 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:2750 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-5399 [No Types Assigned]

Victim must voluntarily interact with attack mechanism

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

A flaw was found in the way certain error conditions were handled by bzread() function in PHP. An attacker could use this flaw to upload a specially crafted bz2 archive which, when parsed via the vulnerable function, could cause the application to crash or execute arbitrary code with the permissions of the user running the PHP application.

Red Hat, Inc. AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Red Hat, Inc. (AV:N/AC:H/Au:N/C:P/I:P/A:P)

https://access.redhat.com/errata/RHSA-2016:2598 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:2750 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-5399 [No Types Assigned]

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

OR
     *cpe:2.3:a:php:php:*:*:*:*:*:*:*:* versions up to (including) 5.5.37
     *cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta

OR
     *cpe:2.3:a:php:php:*:*:*:*:*:*:*:* versions up to (including) 5.5.37
     *cpe:2.3:a:php:php:*:*:*:*:*:*:*:* versions from (including) 5.6.0 up to (excluding) 5.6.24
     *cpe:2.3:a:php:php:*:*:*:*:*:*:*:* versions from (including) 7.0.0 up to (excluding) 7.0.9

http://rhn.redhat.com/errata/RHSA-2016-2598.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-2598.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2750.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-2750.html Third Party Advisory

http://www.debian.org/security/2016/dsa-3631 No Types Assigned

http://www.debian.org/security/2016/dsa-3631 Third Party Advisory

http://www.securityfocus.com/archive/1/538966/100/0/threaded No Types Assigned

http://www.securityfocus.com/archive/1/538966/100/0/threaded Third Party Advisory, VDB Entry

https://security.netapp.com/advisory/ntap-20180112-0001/ No Types Assigned

https://security.netapp.com/advisory/ntap-20180112-0001/ Third Party Advisory

http://www.securityfocus.com/archive/1/538966/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/538966/100/0/threaded [Exploit, Third Party Advisory, VDB Entry]

https://security.netapp.com/advisory/ntap-20180112-0001/ [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-2598.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-2750.html [No Types Assigned]

http://www.debian.org/security/2016/dsa-3631 [No Types Assigned]

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

CWE-787

OR
     *cpe:2.3:a:php:php:5.5.37:*:*:*:*:*:*:* (and previous)
     *cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*
     *cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*

http://packetstormsecurity.com/files/137998/PHP-7.0.8-5.6.23-5.5.37-bzread-OOB-Write.html No Types Assigned

http://packetstormsecurity.com/files/137998/PHP-7.0.8-5.6.23-5.5.37-bzread-OOB-Write.html Exploit, Third Party Advisory, VDB Entry

http://php.net/ChangeLog-5.php No Types Assigned

http://php.net/ChangeLog-5.php Release Notes, Vendor Advisory

http://php.net/ChangeLog-7.php No Types Assigned

http://php.net/ChangeLog-7.php Release Notes, Vendor Advisory

http://seclists.org/fulldisclosure/2016/Jul/72 No Types Assigned

http://seclists.org/fulldisclosure/2016/Jul/72 Exploit, Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/07/21/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2016/07/21/1 Exploit, Mailing List, Third Party Advisory

http://www.securityfocus.com/archive/1/archive/1/538966/100/0/threaded No Types Assigned

http://www.securityfocus.com/archive/1/archive/1/538966/100/0/threaded Exploit, Third Party Advisory, VDB Entry

http://www.securityfocus.com/bid/92051 No Types Assigned

http://www.securityfocus.com/bid/92051 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1036430 No Types Assigned

http://www.securitytracker.com/id/1036430 Third Party Advisory, VDB Entry

https://bugs.php.net/bug.php?id=72613 No Types Assigned

https://bugs.php.net/bug.php?id=72613 Exploit, Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1358395 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1358395 Issue Tracking, Third Party Advisory, VDB Entry

https://www.exploit-db.com/exploits/40155/ No Types Assigned

https://www.exploit-db.com/exploits/40155/ Exploit, Third Party Advisory, VDB Entry