CVE-2016-7416: Buffer Overflow
ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.
Other sources
Fixed bug (add locale length check). (CVE-2016-7416)
— PHP
It was discovered that big locale string causes stack based overflow inside libicu.
PHP bug:
https://bugs.php.net/bug.php?id=73007
PHP patch:
https://github.com/php/php-src/commit/6d55ba265637d6adf0ba7e9c9ef11187d1ec2f5b?w=1
CVE assignment:
http://seclists.org/oss-sec/2016/q3/518
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7416?
CVE-2016-7416 has been classified as a denial of service vulnerability due to the potential for application crashes.
How do I fix CVE-2016-7416?
To resolve CVE-2016-7416, upgrade to PHP versions 5.6.26 or 7.0.11 or later.
Which software versions are affected by CVE-2016-7416?
CVE-2016-7416 affects PHP versions prior to 5.6.26 and 7.x versions before 7.0.11.
What type of attack can exploit CVE-2016-7416?
CVE-2016-7416 can be exploited by remote attackers to cause denial of service through application crashes.
Is there a specific package that addresses CVE-2016-7416?
Yes, the rh-php70-php package versions 0:7.0.27-1.el6 or 0:7.0.27-1.el7 resolve CVE-2016-7416.