{
  "affected": [
    {
      "database_specific": {
        "unresolved_ranges": [
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-beta1"
              }
            ]
          },
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-beta2"
              }
            ]
          },
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-beta3"
              }
            ]
          },
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-beta4"
              }
            ]
          },
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-rc1"
              }
            ]
          },
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-rc2"
              }
            ]
          },
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-rc3"
              }
            ]
          },
          {
            "events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-rc4"
              }
            ]
          }
        ]
      },
      "ranges": [
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.0-dev"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.5"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.6"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.7"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.8"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.9"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.10"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.11"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.12"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.13"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.14"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.15"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.16"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.17"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.18"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.19"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.20"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.21"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.22"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.23"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.24"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.25"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.26"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.27"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.28"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.29"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.30"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.31"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.32"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.33"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.34"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.35"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.36"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "6.37"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "f8d6bbf44160e6d00e71f0172ecf80e78d0f0d3c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "f8d6bbf44160e6d00e71f0172ecf80e78d0f0d3c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "d6c7b4cf627ab409c595e1c76bf0a8deadbc7feb"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "fee422170acc602c2049af4dc2fd00f1da3c5713"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "dff6422ef765e6a6b1ca03184e4ed334c895fd4c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "49f719f7c4f7c1b69dc35ff8fbdea123e7d88f92"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "85c9ed0b6a001b4196b24826841e2cf2d18d2612"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "87a469b868ad719c11fb59d932b8d4a5bcf02b08"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "ead5598cdfaf1505b478aa03db4017f9c1f829f5"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "80cff5cedfe9f8a23596c1a7e1ae456c894a79ae"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "bdd3062d800919f27627b8fddc3887b2495074c2"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a7c068b9bc213c599872a0f729d736f5ff3d7866"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "8135c33f6fd219124b085a2e50ea9bf1f6e87612"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "84f629ace76044177ddd24ad03c2566b9af1688b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7c757303a57f24770f2707529f8398d194a5efcd"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "b62ba500242b711ce932ecfeb258c00e22c258ba"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "23bda276dc19dd3b3d17174b808020ae820879c7"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "77b6714fb3e0bcec9ef7df1a610eb6bdbf09636e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a09fcca0294ef62ba7b1c7ec2af2980f0a39d3e1"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "4e8e0454b3bfc3b846cf4b7bcaca0e8f42f0c17a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "88146f6da7b169a6504ecfdd39fe29913c977350"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "8636b1234c84a07f0f087ca5d64483c4fc7b2256"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7c4e429b7fa771676a18321aac9896e86773891e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "39f366e0a91bb0f79cdf7aab8d50c92473e6bd4e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "10edcf72444e58b2032957edd3d478ac2d431b0c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "3595e528c35eeeef5cdcd11932ede5af0b21447c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7e8649f761e0279e07b2050a7ec61097636f269b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9260bc47d39971738f6d489554a4eb22c8c8e85e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "da8023a98808d243a03d494750a30d06dd1827cc"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "6f2fd0451a5cae837870da665f35514d8730fcf3"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9ce67f2e403f7238a581fc78ca51a7f5ba32fb52"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "203f323c8813f60c634ca23e025934d1527b0418"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "66e94d74994fced9fafbb2583f1c9e1bc636c04f"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "92eedf2c17bcea6db47c6b317c6ebf6078bfffae"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c71b15f68010db028f07839c226d31563f220890"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "01c9f6164e9b48a7d715e07fb0d98fbe71bae87b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "8ffc5db3c0ab926f3d4b2cf8bc51714c8c0f3c93"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a362d912056d6e385a6c458cddf776ec746c68ae"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "e9d0768c1326332a3f1bbac761e7d9d7156d4ae6"
            }
          ],
          "repo": "https://github.com/drupal/drupal",
          "type": "GIT"
        },
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "7.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "8.0"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "60fffd296abce5fc071f3c173c25a2696cf683c6"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "5dc92c2117cafc61daaaaa240fd46c3ac33872a4"
            }
          ],
          "repo": "https://github.com/php/php-src",
          "type": "GIT"
        }
      ]
    }
  ],
  "details": "Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.",
  "id": "CVE-2016-3171",
  "modified": "2026-04-01T23:09:35.708901307Z",
  "published": "2016-04-12T15:59:08.963Z",
  "references": [
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2016/03/15/10"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2016/02/24/19"
    },
    {
      "type": "ADVISORY",
      "url": "http://www.debian.org/security/2016/dsa-3498"
    },
    {
      "type": "FIX",
      "url": "https://www.drupal.org/SA-CORE-2016-001"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}