CVE-2016-5094

php: Integer overflow in php_html_entities()

Published Aug 7, 2016 CVSS 3.0 · 8.6 High EPSS 4.5% KEV · Not listed
Description
Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-533-1 php5 security update
Debian DSA Debian DSA DSA-3602-1 php5 security update
EUVD EUVD EUVD-2016-6046 Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.
Ubuntu USN Ubuntu USN USN-3045-1 PHP vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 12:53 AM
Reserved
May 26, 2016, 12:00 AM
Status
Modified
Published
Aug 7, 2016, 10:59 AM
Modified
Jun 17, 2026, 12:48 AM
Severity
Low
Public date
May 1, 2016, 12:00 AM