CVE-2016-9935 log

Source
Severity Medium
Remote Yes
Type Denial of service
Description
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
Group Package Affected Fixed Severity Status Ticket
AVG-105 php 7.0.13-1 7.1.1-0 High Fixed
Date Advisory Group Package Severity Description
19 Jan 2017 ASA-201701-28 AVG-105 php High multiple issues
References
https://bugs.php.net/bug.php?id=73631
https://github.com/php/php-src/commit/66fd44209d5ffcb9b3d1bc1b9fd8e35b485040c0
http://seclists.org/oss-sec/2016/q4/658