System	Score	Found at
cvssv3	8.1	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json
epss	0.17336	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
epss	0.2119	https://api.first.org/data/v1/epss?cve=CVE-2016-5399
cvssv2	6.8	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json
		https://api.first.org/data/v1/epss?cve=CVE-2016-5399
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5385
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5399
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6289
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6290
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6291
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6292
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6294
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6295
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6296
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6297
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1358395		https://bugzilla.redhat.com/show_bug.cgi?id=1358395
CVE-2016-5399	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/40155.py
RHSA-2016:2598		https://access.redhat.com/errata/RHSA-2016:2598
RHSA-2016:2750		https://access.redhat.com/errata/RHSA-2016:2750
USN-3045-1		https://usn.ubuntu.com/3045-1/

Data source	Exploit-DB
Date added	July 25, 2016
Description	PHP 5.5.37/5.6.23/7.0.8 - 'bzread()' Out-of-Bounds Write
Ransomware campaign use	Known
Source publication date	July 25, 2016
Exploit type	dos
Platform	php
Source update date	July 25, 2016

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Percentile	0.94772
EPSS Score	0.17336
Published At	Aug. 17, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T08:35:12.483236+00:00	Ubuntu USN Importer	Import	https://usn.ubuntu.com/3045-1/	37.0.0