CVE-2016-7412: Buffer Overflow
ext/mysqlnd/mysqlndwireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNEDFLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata.
Other sources
Fixed bug (Heap overflow in mysqlnd related to BIT fields). (CVE-2016-7412)
— PHP
Heap overflow vulnerability was found in mysqlnd which can be triggered by malicious server or MITM by not supplementing UNSIGNEDFLAG in BIT field in phpmysqlndrowpreadtextprotocolaux.
Upstream bug:
https://bugs.php.net/bug.php?id=72293
Upstream patch:
https://github.com/php/php-src/commit/28f80baf3c53e267c9ce46a2a0fadbb981585132?w=1
CVE assignment:
http://seclists.org/oss-sec/2016/q3/518
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7412?
CVE-2016-7412 has a severity rating that indicates it can lead to a denial of service due to a heap-based buffer overflow.
How do I fix CVE-2016-7412?
To fix CVE-2016-7412, upgrade PHP to version 5.6.26 or 7.0.11 or later.
What versions of PHP are affected by CVE-2016-7412?
CVE-2016-7412 affects PHP versions prior to 5.6.26 and 7.0.11.
What type of attack is associated with CVE-2016-7412?
CVE-2016-7412 is associated with remote execution attacks that may lead to denial of service.
Can CVE-2016-7412 impact my application?
Yes, CVE-2016-7412 can impact applications using vulnerable versions of PHP by causing crashes or other unpredictable behavior.