CVE-2016-5093

The geticuvalueinternal function in ext/intl/locale/localemethods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted localegetprimary_language call.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type: GIT
Repo: https://github.com/php/php-src
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

97eff7eb57fc2320c267a949cffd622c38712484

Affected versions

Other

NEWS

NEWS-cvs2svn

php-5.*

php-5.3.23RC1

php-5.3.29

php-5.3.29RC1

php-5.4.30RC1

php-5.4.32RC1

php-5.4.4RC2

php-5.5.24RC1

Database specific

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484",
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "ext/intl/locale/locale_methods.c",
                "function": "get_icu_value_internal"
            },
            "id": "CVE-2016-5093-02917de3",
            "digest": {
                "function_hash": "267995480029817361019472882597289164152",
                "length": 1745.0
            }
        }
    ]
}