Description

Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.

Remediation

References

CVE-2016-4071

Related Vulnerabilities

MySQL CVE-2021-2006 Vulnerability (CVE-2021-2006)

PHP Other Vulnerability (CVE-2007-1900)

WordPress Plugin Ajax Search Lite Security Bypass (3.1)

Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2021-20185)

Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4522)

Severity

Critical

Classification

CVE-2016-4071 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities