Vulnerability Name:

CVE-2016-5114 (CCN-113613)

Assigned:2016-05-11
Published:2016-05-11
Updated:2018-01-05
Summary:sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging.
CVSS v3 Severity:9.1 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
7.9 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): None
Availibility (A): High
7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-125
CWE-119
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2016-5114

Source: CONFIRM
Type: UNKNOWN
http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1

Source: CONFIRM
Type: Patch, Release Notes
http://php.net/ChangeLog-5.php

Source: CONFIRM
Type: Patch, Release Notes
http://php.net/ChangeLog-7.php

Source: CCN
Type: RHSA-2016-2750
Moderate: rh-php56 security, bug fix, and enhancement update

Source: REDHAT
Type: UNKNOWN
RHSA-2016:2750

Source: CCN
Type: oss-sec Mailing List, Sat, 28 May 2016 23:22:55 -0400 (EDT)
Re: Fwd: PHP-FPM fpm_log.c memory leak and buffer overflow

Source: MLIST
Type: Release Notes
[oss-security] 20160528 Re: Fwd: PHP-FPM fpm_log.c memory leak and buffer overflow

Source: CCN
Type: PHP Web site
PHP: Hypertext Preprocessor

Source: MISC
Type: Patch, Third Party Advisory
http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine

Source: CONFIRM
Type: Exploit
https://bugs.php.net/bug.php?id=70755

Source: XF
Type: UNKNOWN
php-cve20165114-bo(113613)

Source: CONFIRM
Type: UNKNOWN
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2016-5114

Vulnerable Configuration:Configuration 1:
  • cpe:/a:php:php:*:*:*:*:*:*:*:* (Version <= 5.5.30)
  • OR cpe:/a:php:php:5.6.0:alpha1:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:alpha2:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:alpha3:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:alpha4:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:alpha5:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.1:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.3:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.4:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.5:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.6:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.7:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.8:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.9:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.10:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.11:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.12:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.13:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.14:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.15:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:5.6.16:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:7.0.0:-:*:*:*:*:*:*
  • OR cpe:/a:php:php:7.0.1:-:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:php:php:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20165114
    V
    		CVE-2016-5114
    2022-05-22
    oval:org.opensuse.security:def:31372
    P
    		Security update for MozillaFirefox (Important) (in QA)
    2022-01-14
    oval:org.opensuse.security:def:31375
    P
    		Security update for libvirt (Important)
    2022-01-10
    oval:org.opensuse.security:def:34678
    P
    		Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:30291
    P
    		Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:33758
    P
    		Security update for xorg-x11-server (Important)
    2021-12-20
    oval:org.opensuse.security:def:34609
    P
    		Security update for mozilla-nss (Important)
    2021-12-06
    oval:org.opensuse.security:def:32219
    P
    		Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-11-19
    oval:org.opensuse.security:def:30145
    P
    		Security update for pcre (Moderate)
    2021-11-10
    oval:org.opensuse.security:def:34571
    P
    		Security update for git (Low)
    2021-10-20
    oval:org.opensuse.security:def:29423
    P
    		Security update for openssl (Low)
    2021-09-20
    oval:org.opensuse.security:def:33971
    P
    		Security update for openssl-1_0_0 (Low)
    2021-09-09
    oval:org.opensuse.security:def:30234
    P
    		Security update for java-1_8_0-openjdk (Important)
    2021-08-20
    oval:org.opensuse.security:def:33949
    P
    		Security update for qemu (Important)
    2021-07-28
    oval:org.opensuse.security:def:33938
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:33937
    P
    		Security update for libgcrypt (Important)
    2021-06-24
    oval:org.opensuse.security:def:33927
    P
    		Security update for caribou (Important)
    2021-06-10
    oval:org.opensuse.security:def:36310
    P
    		tftp-0.48-101.31.27 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36268
    P
    		perl-libwww-perl-5.816-2.23.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:35252
    P
    		Security update for polkit (Important)
    2021-06-03
    oval:org.opensuse.security:def:33903
    P
    		Security update for samba (Important)
    2021-05-04
    oval:org.opensuse.security:def:34649
    P
    		Security update for the Linux Kernel (Important)
    2021-03-09
    oval:org.opensuse.security:def:29480
    P
    		Security update for openldap2 (Important)
    2021-03-03
    oval:org.opensuse.security:def:34033
    P
    		Security update for python-cryptography (Important)
    2021-03-02
    oval:org.opensuse.security:def:34629
    P
    		Security update for bind (Important)
    2021-02-18
    oval:org.opensuse.security:def:32258
    P
    		Security update for screen (Important)
    2021-02-17
    oval:org.opensuse.security:def:31216
    P
    		Security update for postgresql, postgresql12, postgresql13 (Important)
    2021-01-26
    oval:org.opensuse.security:def:34413
    P
    		Security update for openldap2 (Moderate)
    2021-01-14
    oval:org.opensuse.security:def:30013
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:34324
    P
    		Security update for python-cryptography (Moderate)
    2020-12-04
    oval:org.opensuse.security:def:35630
    P
    		perl-spamassassin-3.2.5-26.22.18 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35586
    P
    		libexiv2-4-0.17.1-31.20 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35559
    P
    		gpg2-2.0.9-25.25.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35520
    P
    		PolicyKit-0.9-14.34.9 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:29939
    P
    		Security update for libksba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35162
    P
    		Security update for krb5
    2020-12-01
    oval:org.opensuse.security:def:31516
    P
    		Security update for quagga (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29928
    P
    		Security update for libgcrypt (Low)
    2020-12-01
    oval:org.opensuse.security:def:35105
    P
    		Security update for the Linux Kernel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31477
    P
    		Security update for puppet (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28334
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:29927
    P
    		Security update for libgcrypt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35004
    P
    		Security update for gnuplot (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31428
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28299
    P
    		Security update for netatalk (Important)
    2020-12-01
    oval:org.opensuse.security:def:34868
    P
    		Security update for coreutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27661
    P
    		Security update for ruby
    2020-12-01
    oval:org.opensuse.security:def:34784
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27617
    P
    		Security update for freetype2
    2020-12-01
    oval:org.opensuse.security:def:34773
    P
    		Security update for MozillaFirefox (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31129
    P
    		Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:27603
    P
    		Security update for Mono
    2020-12-01
    oval:org.opensuse.security:def:34772
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31072
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:27564
    P
    		rubygem-sprockets-2_2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30980
    P
    		Security update for icu
    2020-12-01
    oval:org.opensuse.security:def:27515
    P
    		mercurial on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30848
    P
    		Security update for dhcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27462
    P
    		libmusicbrainz-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30774
    P
    		Security update for avahi (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27311
    P
    		unixODBC_23 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30763
    P
    		Security update for apport (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27227
    P
    		libwsman1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33864
    P
    		Security update for jasper
    2020-12-01
    oval:org.opensuse.security:def:30597
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:30762
    P
    		Security update for apache2-mod_security2
    2020-12-01
    oval:org.opensuse.security:def:27170
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33815
    P
    		Security update for glib2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30560
    P
    		Security update for OpenSSL
    2020-12-01
    oval:org.opensuse.security:def:27089
    P
    		avahi on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29922
    P
    		Security update for libexif (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26961
    P
    		libopenssl0_9_8 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33601
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:29878
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26897
    P
    		freeradius-server on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33513
    P
    		Security update for perl-HTML-Parser
    2020-12-01
    oval:org.opensuse.security:def:29860
    P
    		Security update for the Linux Kernel
    2020-12-01
    oval:org.opensuse.security:def:35465
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26886
    P
    		ecryptfs-utils-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33456
    P
    		Security update for icu
    2020-12-01
    oval:org.opensuse.security:def:29821
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:35424
    P
    		Security update for openssl1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26885
    P
    		e2fsprogs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33361
    P
    		Security update for openssl1 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29772
    P
    		Security update for glibc (Important)
    2020-12-01
    oval:org.opensuse.security:def:34786
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33226
    P
    		pcsc-ccid on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29718
    P
    		Security update for MozillaFirefox
    2020-12-01
    oval:org.opensuse.security:def:34742
    P
    		Security update for Mesa (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33147
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29565
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34717
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33136
    P
    		libQtWebKit4-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31413
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:33135
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29337
    P
    		Security update for spacewalk
    2020-12-01
    oval:org.opensuse.security:def:30737
    P
    		Security update for SDL (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29206
    P
    		Security update for openssl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30693
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:29137
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:30674
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29126
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:34267
    P
    		Security update for procmail
    2020-12-01
    oval:org.opensuse.security:def:30635
    P
    		Security update for xen (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29125
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:34169
    P
    		Security update for openssl (Important)
    2020-12-01
    oval:org.opensuse.security:def:30586
    P
    		Security update for openssh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30531
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:30377
    P
    		Security update for xalan-j2
    2020-12-01
    oval:org.opensuse.security:def:35471
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:35412
    P
    		Security update for openssl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31581
    P
    		Security update for tar (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31537
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:com.ubuntu.precise:def:20165114000
    V
    		CVE-2016-5114 on Ubuntu 12.04 LTS (precise) - low.
    2016-08-07
    oval:com.ubuntu.xenial:def:201651140000000
    V
    		CVE-2016-5114 on Ubuntu 16.04 LTS (xenial) - low.
    2016-08-07
    oval:com.ubuntu.trusty:def:20165114000
    V
    		CVE-2016-5114 on Ubuntu 14.04 LTS (trusty) - low.
    2016-08-07
    oval:com.ubuntu.xenial:def:20165114000
    V
    		CVE-2016-5114 on Ubuntu 16.04 LTS (xenial) - low.
    2016-08-07
    BACK
    php php *
    php php 5.6.0 alpha1
    php php 5.6.0 alpha2
    php php 5.6.0 alpha3
    php php 5.6.0 alpha4
    php php 5.6.0 alpha5
    php php 5.6.0 beta1
    php php 5.6.0 beta2
    php php 5.6.0 beta3
    php php 5.6.0 beta4
    php php 5.6.1
    php php 5.6.2
    php php 5.6.3
    php php 5.6.4
    php php 5.6.5
    php php 5.6.6
    php php 5.6.7
    php php 5.6.8
    php php 5.6.9
    php php 5.6.10
    php php 5.6.11
    php php 5.6.12
    php php 5.6.13
    php php 5.6.14
    php php 5.6.15
    php php 5.6.16
    php php 7.0.0
    php php 7.0.1
    php php -