Main Vulnerability Database Vulnerabilities #VU3611

Use-after-free error in PHP - CVE-2016-5771

Published: September 20, 2016 / Updated: June 17, 2021

Vulnerability identifier: #VU3611

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-5771

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary PHP code on the target system.

The vulnerability exists due to use-after-free in GC algorithm and unserialize. A remote attacker can create a specially crafted zval object and exploit the PHP process by taking over the EIP/RIP.

Successful exploitation of this vulnerability results in complete control over the vulnerable web application and execute arbitrary PHP code on the target system.

Affected software

PHP
SUSE Linux

How to mitigate CVE-2016-5771

Update to version 5.6.23.

Links to Public Exploits and PoC-codes

Exploit #6436 - Kerio Control Unified Threat Management 9.1.0 build 1087 / 9.1.1 build 1324 - Multiple Vulnerabilities (June 17, 2021)

External References

https://bugs.php.net/bug.php?id=72433