Test ID:	1.3.6.1.4.1.25623.1.0.105844
Category:	F5 Local Security Checks
Title:	F5 BIG-IP - PHP vulnerabilities CVE-2016-5094 and CVE-2016-5095
Summary:	F5 BIG-IP is prone to multiple vulnerabilities in PHP.;; This VT has been deprecated as a duplicate of the VT 'F5 BIG-IP - PHP vulnerabilities; CVE-2016-5094 and CVE-2016-5095' (OID: 1.3.6.1.4.1.25623.1.0.140644).
Description:	Summary: F5 BIG-IP is prone to multiple vulnerabilities in PHP. This VT has been deprecated as a duplicate of the VT 'F5 BIG-IP - PHP vulnerabilities CVE-2016-5094 and CVE-2016-5095' (OID: 1.3.6.1.4.1.25623.1.0.140644). Vulnerability Insight: - CVE-2016-5094 Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function. - CVE-2016-5095: Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call. Vulnerability Impact: Although BIG-IP software contains the vulnerable code, BIG-IP systems do not use the vulnerable code in a way that exposes the vulnerability in a standard default configuration. When exploited, the PHP module may encounter an out-of-memory error that affects the Configuration utility. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5094 BugTraq ID: 90857 http://www.securityfocus.com/bid/90857 Debian Security Information: DSA-3602 (Google Search) http://www.debian.org/security/2016/dsa-3602 http://www.openwall.com/lists/oss-security/2016/05/26/3 RedHat Security Advisories: RHSA-2016:2750 http://rhn.redhat.com/errata/RHSA-2016-2750.html Common Vulnerability Exposure (CVE) ID: CVE-2016-5095 BugTraq ID: 92144 http://www.securityfocus.com/bid/92144
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.