Double free vulnerability in the phpmbregexeregreplaceexec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "5.5.36"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.0-alpha1"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.0-alpha2"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.0-alpha3"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.0-beta1"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.0-beta2"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.0-beta3"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.0-beta4"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.1"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.2"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.3"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.4"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.5"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.6"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.7"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.8"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.9"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.10"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.11"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.12"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.13"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.14"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.15"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.16"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.17"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.18"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.19"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.20"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.21"
},
{
"introduced": "0"
},
{
"last_affected": "5.6.22"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.6"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.7"
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5768.json"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.6.0-alpha4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.6.0-alpha5"
}
]
}
]
[
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "80211644445470177327357614177420692722",
"length": 4778.0
},
"source": "https://github.com/php/php-src/commit/5b597a2e5b28e2d5a52fc1be13f425f08f47cb62",
"id": "CVE-2016-5768-62f748d5",
"target": {
"file": "ext/mbstring/php_mbregex.c",
"function": "_php_mb_regex_ereg_replace_exec"
}
}
]