CVE-2016-4071: Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x b...

Security readout for executives and security teams

This is an old PHP SNMP vulnerability that could let a remote attacker run code if an application passes attacker-controlled input into SNMP::get on vulnerable PHP versions. Business risk is highest for legacy PHP systems with the SNMP extension enabled and reachable application paths using that call. Exposure is most likely on legacy PHP 5.5, 5.6, or early 7.0 deployments with the SNMP extension installed and application code invoking SNMP::get with untrusted input. Prioritize remediation for legacy, internet-facing PHP applications using SNMP. For unsupported PHP versions, plan upgrade or isolation because the reported impact is code execution and public exploit information exists. Mitigation focus: Upgrade PHP to 5.5.34, 5.6.20, 7.0.5, or later vendor-fixed packages.; Prefer currently supported PHP branches rather than end-of-life fixed point releases.; Apply distribution advisories from Ubuntu, Debian, Red Hat, Gentoo, SUSE, Apple, or HPE where applicable..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.