CVE-2016-5768

Double free vulnerability in the phpmbregexeregreplaceexec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type: GIT
Repo: https://github.com/php/php-src
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

5b597a2e5b28e2d5a52fc1be13f425f08f47cb62

Affected versions

Other

NEWS

NEWS-cvs2svn

php-5.*

php-5.3.23RC1

php-5.3.29

php-5.3.29RC1

php-5.4.30RC1

php-5.4.32RC1

php-5.4.4RC2

php-5.5.24RC1

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "80211644445470177327357614177420692722",
                "length": 4778.0
            },
            "id": "CVE-2016-5768-62f748d5",
            "source": "https://github.com/php/php-src/commit/5b597a2e5b28e2d5a52fc1be13f425f08f47cb62",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "ext/mbstring/php_mbregex.c",
                "function": "_php_mb_regex_ereg_replace_exec"
            },
            "deprecated": false
        }
    ]
}