CVE-2016-5385
High · 8.1CVSS
8.1
EPSS
50.4%
Published
Jul 19, 2016
CISA due date
—
The record
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | amphp/artax | 0 | 1.0.4 |
| Packagist | amphp/artax | 2.0.0 | 2.0.4 |
| Packagist | bugsnag/bugsnag-laravel | 0 | 2.0.2 |
| Packagist | drupal/core | 8.0 | 8.1.7 |
| Packagist | guzzlehttp/guzzle | 4.0.0-rc2 | 4.2.4 |
| Packagist | guzzlehttp/guzzle | 5 | 5.3.1 |
| Packagist | guzzlehttp/guzzle | 6 | 6.2.1 |
| Packagist | padraic/humbug_get_contents | 0 | 1.1.2 |
| Debian:7 | php5 | 0 | 5.4.45-0+deb7u6 |
| Debian:8 | php5 | 0 | 5.6.24+dfsg-0+deb8u1 |
| Red Hat:enterprise_linux:6::client | php | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-bcmath | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-cli | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-common | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-dba | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-debuginfo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-devel | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-embedded | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-enchant | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-fpm | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-gd | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-imap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-intl | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-ldap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-mbstring | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-mysql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-odbc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-pdo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-pgsql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-process | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-pspell | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-recode | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-snmp | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-soap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-tidy | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-xml | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-xmlrpc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::client | php-zts | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-bcmath | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-cli | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-common | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-dba | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-debuginfo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-devel | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-embedded | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-enchant | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-fpm | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-gd | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-imap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-intl | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-ldap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-mbstring | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-mysql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-odbc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-pdo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-pgsql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-process | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-pspell | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-recode | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-snmp | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-soap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-tidy | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-xml | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-xmlrpc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::computenode | php-zts | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-bcmath | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-cli | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-common | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-dba | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-debuginfo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-devel | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-embedded | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-enchant | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-fpm | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-gd | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-imap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-intl | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-ldap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-mbstring | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-mysql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-odbc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-pdo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-pgsql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-process | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-pspell | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-recode | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-snmp | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-soap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-tidy | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-xml | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-xmlrpc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::server | php-zts | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-bcmath | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-cli | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-common | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-dba | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-debuginfo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-devel | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-embedded | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-enchant | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-fpm | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-gd | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-imap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-intl | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-ldap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-mbstring | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-mysql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-odbc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-pdo | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-pgsql | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-process | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-pspell | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-recode | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-snmp | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-soap | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-tidy | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-xml | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-xmlrpc | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:6::workstation | php-zts | 0 | 0:5.3.3-48.el6_8 |
| Red Hat:enterprise_linux:7::client | php | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-bcmath | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-cli | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-common | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-dba | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-debuginfo | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-devel | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-embedded | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-enchant | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-fpm | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-gd | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-intl | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-ldap | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-mbstring | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-mysql | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-mysqlnd | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-odbc | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-pdo | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-pgsql | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-process | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-pspell | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-recode | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-snmp | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-soap | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-xml | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::client | php-xmlrpc | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-bcmath | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-cli | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-common | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-dba | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-debuginfo | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-devel | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-embedded | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-enchant | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-fpm | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-gd | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-intl | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-ldap | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-mbstring | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-mysql | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-mysqlnd | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-odbc | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-pdo | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-pgsql | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-process | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-pspell | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-recode | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-snmp | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-soap | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-xml | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::computenode | php-xmlrpc | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-bcmath | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-cli | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-common | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-dba | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-debuginfo | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-devel | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-embedded | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-enchant | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-fpm | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-gd | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-intl | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-ldap | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-mbstring | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-mysql | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-mysqlnd | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-odbc | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-pdo | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-pgsql | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-process | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-pspell | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-recode | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-snmp | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-soap | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-xml | 0 | 0:5.4.16-36.3.el7_2 |
| Red Hat:enterprise_linux:7::server | php-xmlrpc | 0 | 0:5.4.16-36.3.el7_2 |
Related vulnerabilities
- GHSA-83v7-c2cf-p9c2 Drupal core allows Forceful Browsing Also affects drupal/core
- GHSA-h89p-5896-f4q8 Drupal core allows Content Spoofing Also affects drupal/core
- GHSA-mhpg-hpj5-73r2 Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels Also affects drupal/core
- GHSA-m6vv-vcj8-w8m7 Drupal core allows Object Injection Also affects drupal/core
- CVE-2025-13081 Drupal core allows Object Injection Also affects drupal/core
- CVE-2025-13082 Drupal core allows Content Spoofing Also affects drupal/core
- CVE-2025-13083 Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels Also affects drupal/core
- CVE-2025-13080 Drupal core allows Forceful Browsing Also affects drupal/core