CVE-2016-10160

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-193

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
http://php.net/ChangeLog-7.phpRelease Notes, Vendor Advisory
http://www.debian.org/security/2017/dsa-3783Third Party Advisory
http://www.securityfocus.com/bid/95783Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037659Broken Link, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1296Third Party Advisory
https://bugs.php.net/bug.php?id=73768Issue Tracking, Patch, Vendor Advisory
https://github.com/php/php-src/commit/b28b8b2fee6dfa6fcd13305c581bb835689ac3beIssue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201702-29Third Party Advisory
https://security.netapp.com/advisory/ntap-20180112-0001/Third Party Advisory
https://www.tenable.com/security/tns-2017-04Third Party Advisory
http://php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
http://php.net/ChangeLog-7.phpRelease Notes, Vendor Advisory
http://www.debian.org/security/2017/dsa-3783Third Party Advisory
http://www.securityfocus.com/bid/95783Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037659Broken Link, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1296Third Party Advisory
https://bugs.php.net/bug.php?id=73768Issue Tracking, Patch, Vendor Advisory
https://github.com/php/php-src/commit/b28b8b2fee6dfa6fcd13305c581bb835689ac3beIssue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201702-29Third Party Advisory
https://security.netapp.com/advisory/ntap-20180112-0001/Third Party Advisory
https://www.tenable.com/security/tns-2017-04Third Party Advisory

Timeline

Published: Jan 24, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-101617.5The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remo CVE-2016-101627.5The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a de CVE-2016-101636.5Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS use CVE-2016-101649.8Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attack CVE-2016-101657.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial CVE-2016-101669.8Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows rem CVE-2016-101675.5The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a deni CVE-2016-101687.8Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vecto CVE-2016-101695.5The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via CVE-2016-10178.8Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 CVE-2016-101705.5The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read)CVE-2016-101715.5The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bound