CVE-2016-9934

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted…

published January 4, 2017

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06789 · 93.9th percentile
Published
2017-01-04T20:00Z
EPSS history
Timeline
  • 04 JAN 20:00Z
    ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted…
    cvelistv5