CVE-2016-2554: Buffer Overflow
A stack overflow vulnerability was reported that may occur when decompressing tar archives due to phartarwriteheaders() potentially copying non-terminated linknames from entries parsed by pharparsetarfile().
Upstream bug:
https://bugs.php.net/bug.php?id=71488
Upstream patch:
https://git.php.net/?p=php-src.git;a=commit;h=07c7df68bd68bbe706371fccc77c814ebb335d9e
Other sources
Fixed bug (Stack overflow when decompressing tar archives). (CVE-2016-2554)
— PHP
Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.
— Ubuntu
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2016-2554?
CVE-2016-2554 refers to a stack-based buffer overflow vulnerability in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3.
How severe is CVE-2016-2554?
CVE-2016-2554 has a severity rating of 9.8 (critical).
How does CVE-2016-2554 impact PHP?
CVE-2016-2554 can allow remote attackers to cause a denial of service (application crash) or potentially have other unspecified impacts via a crafted TAR archive.
Which versions of PHP are affected by CVE-2016-2554?
The vulnerability affects PHP versions before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3.
How can I fix CVE-2016-2554?
To fix CVE-2016-2554, it is recommended to update PHP to version 5.5.32, 5.6.18, or 7.0.3 or later.