CVE-2016-5770
CriticalSummary
Integer overflow in the SplFileObject::fread function in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument.
Risk Assessment
Attackers may exploit this vulnerability to disrupt application functionality, potentially leading to service outages. There is also a risk of unspecified side effects.
Recommendation
It is recommended to upgrade PHP to version 5.5.37 or 5.6.23 and later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096.