CVE-2016-9935: Critical severity php vulnerability
An invalid read occurs when wddx decodes empty boolean element, leading to arbitrary memory read or crash.
Upstream bug:
https://bugs.php.net/bug.php?id=73631
Upstream patch:
https://github.com/php/php-src/commit/66fd44209d5ffcb9b3d1bc1b9fd8e35b485040c0
CVE assignment:
http://seclists.org/oss-sec/2016/q4/658
Other sources
Fixed bug (Invalid read when wddx decodes empty boolean element). (CVE-2016-9935)
— PHP
The phpwddxpushelement function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9935?
CVE-2016-9935 is classified as a vulnerability that allows remote attackers to cause denial of service through out-of-bounds read and potential memory corruption.
How do I fix CVE-2016-9935?
To fix CVE-2016-9935, upgrade PHP to version 5.6.29 or 7.0.14 or later.
Which PHP versions are affected by CVE-2016-9935?
CVE-2016-9935 affects PHP versions prior to 5.6.29 and 7.x prior to 7.0.14.
What types of attacks are possible with CVE-2016-9935?
CVE-2016-9935 could lead to denial of service and may allow attackers to exploit memory corruption issues.
Is CVE-2016-9935 a critical vulnerability?
CVE-2016-9935 is considered serious due to its potential impact on service availability and memory integrity.