CVE-2016-9138

PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup.

We have discovered 847,212 live websites that are affected by CVE-2016-9138.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains847,212 live websites (12% of PHP install base)
Vulnerable Versions
  • from 0 through 5.6.27
Vulnerable Versions Count176 versions ( 33% of all versions)



Details

  • Published - Jan 4, 2017
  • Updated - Aug 6, 2024

Website Distribution by Country

Number of websites using CVE-2016-9138
United States187,555 websites


Taiwan107,371 websites
Russia83,485 websites
France66,070 websites
Japan59,850 websites
Germany49,241 websites
China33,364 websites
Netherlands24,356 websites
Korea, South18,259 websites

Website Distribution by TLD

Number of websites using CVE-2016-9138
.com394,867 websites
.ru72,212 websites
.de34,191 websites
.net31,431 websites
.fr24,640 websites
.org22,114 websites
.nl18,596 websites
.jp16,140 websites
.info12,168 websites
.it11,051 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2016-9138

Top websites that are affected by CVE-2016-9138. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***********.com Canada***
******************.com United States*,***
*******.**.com United States*,***
***.org Italy*,***
*********.******.net United States*,***
****.com United States*,***
********.com United States*,***
***.ru Russia*,***
****.**.com United States*,***
*****.***.tw Taiwan*,***
See full domain list

FAQ

A total of 847,212 websites have been identified as vulnerable to CVE-2016-9138, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2016-9138 vulnerability.
PHP versions up to and including 5.6.27 are vulnerable to CVE-2016-9138.