Description
ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata.
Remediation
References
Related Vulnerabilities
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-3057)
WordPress Plugin amr shortcode any widget Cross-Site Scripting (4.0)
e107 Other Vulnerability (CVE-2006-3259)
Oracle Database Server CVE-2012-0552 Vulnerability (CVE-2012-0552)
Grafana Improper Authentication Vulnerability (CVE-2018-15727)