Wind River Support Network

HomeDefectsLIN6-12138
Fixed

LIN6-12138 : Security Advisory - phpmyadmin - CVE-2016-6620

Created: Dec 15, 2016    Updated: Dec 3, 2018
Resolved Date: Dec 27, 2016
Found In Version: 6.0.0.31
Fix Version: 6.0.0.32
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function without verification that it's valid serialized data. The unserialization can result in code execution because of the interaction with object instantiation and autoloading. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6620

Other Downloads


Live chat
Online