Description
Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.
Remediation
References
Related Vulnerabilities
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2018-1000424)
silverstripeCMS Other Vulnerability (CVE-2015-5062)
MySQL Other Vulnerability (CVE-2005-1636)
WordPress Plugin 301 Redirects-Easy Redirect Manager SQL Injection (2.50)
PHP Resource Management Errors Vulnerability (CVE-2007-4660)