CVE Catalog
CVE-2016-6288
CriticalSummary
The php_url_parse_ex function in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.
Risk Assessment
Attackers may exploit this vulnerability to disrupt application functionality, potentially leading to downtime and loss of service availability.
Recommendation
It is recommended to upgrade PHP to version 5.5.38 or later to mitigate this vulnerability.
Original NVD description (English source)
The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.