CVE-2016-6291: Buffer Overflow

Q: What is the severity of CVE-2016-6291?

CVE-2016-6291 has a medium severity rating as it can lead to denial of service and memory corruption.

Q: How do I fix CVE-2016-6291?

To fix CVE-2016-6291, upgrade PHP to version 5.5.38, 5.6.24, or 7.0.9 or higher.

Q: What type of vulnerability is CVE-2016-6291?

CVE-2016-6291 is a vulnerability that allows remote attackers to exploit out-of-bounds array access and cause memory corruption.

Q: Can CVE-2016-6291 expose sensitive information?

Yes, CVE-2016-6291 can potentially allow attackers to obtain sensitive information from the process memory.

Q: Which PHP versions are affected by CVE-2016-6291?

CVE-2016-6291 affects PHP versions before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9.

Published Jul 25, 2016

Updated

The exifprocessIFDinMAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image.

Other sources

Fixed bug (Out of bound read in exifprocessIFDinMAKERNOTE). (CVE-2016-6291)

— PHP

Affected Software

41 affected componentsFixes available

PHP PHP<=5.5.37

PHP PHP=5.6.0-alpha1

PHP PHP=5.6.0-alpha2

PHP PHP=5.6.0-alpha3

PHP PHP=5.6.0-alpha4

PHP PHP=5.6.0-alpha5

PHP PHP=5.6.0-beta1

PHP PHP=5.6.0-beta2

PHP PHP=5.6.0-beta3

PHP PHP=5.6.0-beta4

PHP PHP=5.6.1

PHP PHP=5.6.2

PHP PHP=5.6.3

PHP PHP=5.6.4

PHP PHP=5.6.5

PHP PHP=5.6.6

PHP PHP=5.6.7

PHP PHP=5.6.8

PHP PHP=5.6.9

PHP PHP=5.6.10

PHP PHP=5.6.11

PHP PHP=5.6.12

PHP PHP=5.6.13

PHP PHP=5.6.14

PHP PHP=5.6.15

PHP PHP=5.6.16

PHP PHP=5.6.17

PHP PHP=5.6.18

PHP PHP=5.6.19

PHP PHP=5.6.20

PHP PHP=5.6.21

PHP PHP=5.6.22

PHP PHP=5.6.23

PHP PHP=7.0.0

PHP PHP=7.0.1

PHP PHP=7.0.2

PHP PHP=7.0.3

PHP PHP=7.0.4

PHP PHP=7.0.5

PHP PHP=7.0.8

PHP PHP<7.0.9

7.0.9

Remediation

Patch Available

https://bugs.php.net/72603

Event History

Jul 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-6291?