CVE-2016-4071

Critical

Published: 20/05/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.

Risk Assessment

This vulnerability could lead to remote code execution, posing a serious security risk to systems running vulnerable versions of PHP.

Recommendation

It is recommended to upgrade PHP to version 5.5.34, 5.6.20, or 7.0.5 or later to mitigate this vulnerability.

Original NVD description (English source)

Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.