CVE-2016-1902
- Source
- https://cve.org/CVERecord?id=CVE-2016-1902
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1902.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-1902
- Aliases
- Downstream
- Published
- 2016-06-01T22:59:01Z
- Modified
- 2026-10-24T10:45:23Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when used with PHP 5.x without the paragonie/random_compat library and the openssl_random_pseudo_bytes function fails, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "last_affected": "2.3.36" } ], "source": "CPE_RANGE" } ], "vendor_product": "sensiolabs:symfony" }, { "cpes": [ "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "source": "CPE_STRING" } ], "vendor_product": "debian:debian_linux" } ] }- References
Affected packages
Git / github.com/symfony/security-http
Affected ranges
- Type
- GIT
- Repo
- https://github.com/symfony/security-http
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.0:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.0" }, { "last_affected": "2.6.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.1:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.1" }, { "last_affected": "2.6.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.2:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.2" }, { "last_affected": "2.6.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.3:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.3" }, { "last_affected": "2.6.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.4:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.4" }, { "last_affected": "2.6.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.5:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.5" }, { "last_affected": "2.6.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.6:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.6" }, { "last_affected": "2.6.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.7:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.7" }, { "last_affected": "2.6.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.8:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.8" }, { "last_affected": "2.6.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.9:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.9" }, { "last_affected": "2.6.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.10:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.10" }, { "last_affected": "2.6.10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.11:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.11" }, { "last_affected": "2.6.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.12:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.12" }, { "last_affected": "2.6.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.0:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.0" }, { "last_affected": "2.7.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.1:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.1" }, { "last_affected": "2.7.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.2:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.2" }, { "last_affected": "2.7.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.3:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.3" }, { "last_affected": "2.7.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.4:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.4" }, { "last_affected": "2.7.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.5:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.5" }, { "last_affected": "2.7.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.6:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.6" }, { "last_affected": "2.7.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.7:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.7" }, { "last_affected": "2.7.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.8:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.8" }, { "last_affected": "2.7.8" } ], "source": "CPE_STRING" } ] }
Git / github.com/symfony/symfony
Affected ranges
- Type
- GIT
- Repo
- https://github.com/symfony/symfony
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "2.3.36" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.0:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.0" }, { "last_affected": "2.6.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.1:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.1" }, { "last_affected": "2.6.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.2:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.2" }, { "last_affected": "2.6.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.3:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.3" }, { "last_affected": "2.6.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.4:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.4" }, { "last_affected": "2.6.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.5:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.5" }, { "last_affected": "2.6.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.6:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.6" }, { "last_affected": "2.6.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.7:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.7" }, { "last_affected": "2.6.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.8:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.8" }, { "last_affected": "2.6.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.9:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.9" }, { "last_affected": "2.6.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.10:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.10" }, { "last_affected": "2.6.10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.11:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.11" }, { "last_affected": "2.6.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.6.12:*:*:*:*:*:*:*", "range": [ { "introduced": "2.6.12" }, { "last_affected": "2.6.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.0:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.0" }, { "last_affected": "2.7.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.1:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.1" }, { "last_affected": "2.7.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.2:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.2" }, { "last_affected": "2.7.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.3:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.3" }, { "last_affected": "2.7.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.4:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.4" }, { "last_affected": "2.7.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.5:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.5" }, { "last_affected": "2.7.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.6:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.6" }, { "last_affected": "2.7.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.7:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.7" }, { "last_affected": "2.7.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:sensiolabs:symfony:2.7.8:*:*:*:*:*:*:*", "range": [ { "introduced": "2.7.8" }, { "last_affected": "2.7.8" } ], "source": "CPE_STRING" } ] }
Affected versions
2.*
2.6.0
2.6.1
2.6.10
2.6.11
2.6.12
2.6.2
2.6.3
2.6.4
2.6.5
2.6.6
2.6.7
2.6.8
2.6.9
2.7.0
2.7.1
2.7.2
2.7.3
2.7.4
2.7.5
2.7.6
2.7.7
2.7.8
v2.*
v2.0.0
v2.0.0-RC1
v2.0.0-RC2
v2.0.0-RC3
v2.0.0-RC4
v2.0.0-RC5
v2.0.0-RC6
v2.0.0BETA1
v2.0.0BETA2
v2.0.0BETA3
v2.0.0BETA4
v2.0.0BETA5
v2.0.0PR8
v2.1.0
v2.1.0-BETA1
v2.1.0-BETA2
v2.1.0-BETA3
v2.1.0-BETA4
v2.1.0-RC1
v2.1.0-RC2
v2.2.0-BETA1
v2.2.0-BETA2
v2.3.0
v2.3.0-BETA1
v2.3.0-BETA2
v2.3.0-RC1
v2.3.1
v2.3.10
v2.3.11
v2.3.12
v2.3.13
v2.3.14
v2.3.15
v2.3.16
v2.3.17
v2.3.19
v2.3.2
v2.3.20
v2.3.21
v2.3.22
v2.3.23
v2.3.24
v2.3.25
v2.3.26
v2.3.27
v2.3.28
v2.3.29
v2.3.3
v2.3.30
v2.3.31
v2.3.32
v2.3.33
v2.3.34
v2.3.35
v2.3.36
v2.3.4
v2.3.5
v2.3.6
v2.3.7
v2.3.8
v2.3.9
v2.4.0-BETA1
v2.4.0-BETA2
v2.5.0-BETA1
v2.5.0-BETA2
v2.6.0-BETA1
v2.7.0
v2.7.0-BETA1
v2.7.0-BETA2
v2.7.1
v2.7.2
v2.7.3
v2.7.4
v2.7.5
v2.7.6
v2.7.7
v2.7.8
Other
vPR3
vPR4
vPR5
vPR6
vPR8
vPR9