ID de Prueba:	1.3.6.1.4.1.25623.1.0.808798
Categoría:	Denial of Service
Título:	PHP Denial of Service Vulnerability - 01 (Aug 2016) - Linux
Resumen:	PHP is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: PHP is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to the multiple integer overflows in 'php_zip.c' script in the zip extension. Vulnerability Impact: Successfully exploiting this issue allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact. Affected Software/OS: PHP 7.x versions prior to 7.0.6 on Linux Solution: Update to PHP version 7.0.6 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3078 1035701 http://www.securitytracker.com/id/1035701 39742 https://www.exploit-db.com/exploits/39742/ [oss-security] 20160428 CVE-2016-3078: php: integer overflow in ZipArchive::getFrom* http://www.openwall.com/lists/oss-security/2016/04/28/1 https://bugs.php.net/bug.php?id=71923 https://github.com/php/php-src/commit/3b8d4de300854b3517c7acb239b84f7726c1353c?w=1 https://php.net/ChangeLog-7.php https://security-tracker.debian.org/tracker/CVE-2016-3078
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.