{
  "action": "In general, a standard system update will make all the necessary changes.",
  "cves": [
    "CVE-2016-7398"
  ],
  "description": "It was discovered that pecl_http incorrectly handled certain HTTP request\nparameters, leading to a type confusion. A remote attacker could possibly\nuse this issue to cause PHP to crash, resulting in a denial of service, or\nexecute arbitrary code.",
  "id": "USN-9055-1",
  "isummary": "pecl_http could be made to crash or run programs if it received specially\ncrafted network traffic.",
  "releases": {
    "xenial": {
      "allbinaries": {
        "php-pecl-http": {
          "pocket": "esm-apps-legacy",
          "source": "php-pecl-http",
          "version": "3.0.1-0ubuntu5+esm1"
        },
        "php-pecl-http-dev": {
          "pocket": "esm-apps-legacy",
          "source": "php-pecl-http",
          "version": "3.0.1-0ubuntu5+esm1"
        }
      },
      "binaries": {
        "php-pecl-http": {
          "pocket": "esm-apps-legacy",
          "version": "3.0.1-0ubuntu5+esm1"
        }
      },
      "sources": {
        "php-pecl-http": {
          "description": "Extended HTTP support for PHP",
          "version": "3.0.1-0ubuntu5+esm1"
        }
      }
    }
  },
  "summary": "php-pecl-http vulnerability",
  "timestamp": 1794421958.045742,
  "title": "pecl_http vulnerability"
}