Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Use After Free Vulnerability - CVE-2016-9138 - Vulnerability Database
PHP

PHP Use After Free Vulnerability - CVE-2016-9138

Critical
Reference: CVE-2016-9138
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-9138
Title: PHP Use After Free Vulnerability
Overview:

PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data as demonstrated by Exception::__toString with DateInterval::__wakeup.