Vulnerability-Lookup

RHSA-2015:1187

Vulnerability from csaf_redhat - Published: 2015-06-25 08:43 - Updated: 2026-06-28 12:24

Summary

Red Hat Security Advisory: rh-php56-php security update

Severity

Important

Notes

Topic: Updated rh-php56-php packages that fix multiple security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interpreter, causing it to crash or, possibly, execute arbitrary code. (CVE-2015-3330) A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time. (CVE-2015-4024) An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extension parsed file listing FTP server responses. A malicious FTP server could use this flaw to cause a PHP application to crash or, possibly, execute arbitrary code. (CVE-2015-4022) Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code. (CVE-2015-4602, CVE-2015-4603) It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions. (CVE-2015-4025, CVE-2015-4026, CVE-2015-3411, CVE-2015-3412, CVE-2015-4598) Multiple flaws were found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened. (CVE-2015-2783, CVE-2015-3307, CVE-2015-3329, CVE-2015-4021) Multiple flaws were found in PHP's File Information (fileinfo) extension. A remote attacker could cause a PHP application to crash if it used fileinfo to identify type of attacker supplied files. (CVE-2015-4604, CVE-2015-4605) All rh-php56-php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd24-httpd service must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2015-2783

A buffer over-read flaw was found in PHP's phar (PHP Archive) paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 211 products

Product	Version	Remediation
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-0:5.6.5-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-bcmath-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-cli-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-common-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-dba-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-dbg-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-debuginfo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-devel-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-embedded-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-enchant-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-fpm-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-gd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-gmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-imap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-intl-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-ldap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-mbstring-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-mysqlnd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-odbc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-opcache-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-pdo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-pgsql-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-process-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-pspell-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-recode-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-snmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-soap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-tidy-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-xml-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:rh-php56-php-xmlrpc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-0:5.6.5-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-bcmath-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-cli-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-common-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-dba-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-dbg-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-debuginfo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-devel-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-embedded-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-enchant-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-fpm-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-gd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-gmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-imap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-intl-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-ldap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-mbstring-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-mysqlnd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-odbc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-opcache-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-pdo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-pgsql-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-process-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-pspell-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-recode-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-snmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-soap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-tidy-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-xml-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:rh-php56-php-xmlrpc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-bcmath-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-cli-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-common-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-dba-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-dbg-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-debuginfo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-devel-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-embedded-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-enchant-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-fpm-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-gd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-gmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-imap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-intl-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-ldap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-mbstring-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-mysqlnd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-odbc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-opcache-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-pdo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-pgsql-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-process-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-pspell-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-recode-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-snmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-soap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-tidy-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-xml-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:rh-php56-php-xmlrpc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-bcmath-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-cli-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-common-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-dba-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-dbg-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-debuginfo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-devel-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-embedded-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-enchant-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-fpm-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-gd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-gmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-imap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-intl-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-ldap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-mbstring-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-mysqlnd-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-odbc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-opcache-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-pdo-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-pgsql-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-process-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-pspell-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-recode-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-snmp-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-soap-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-tidy-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-xml-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:rh-php56-php-xmlrpc-0:5.6.5-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-0:5.6.5-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-bcmath-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-cli-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-common-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-dba-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-dbg-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-debuginfo-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-devel-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-embedded-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-enchant-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-fpm-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-gd-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-gmp-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-intl-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-ldap-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-mbstring-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-mysqlnd-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-odbc-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-opcache-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-pdo-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-pgsql-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-process-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-pspell-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-recode-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-snmp-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-soap-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-xml-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0-7.1.Z:rh-php56-php-xmlrpc-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-bcmath-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-cli-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-common-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-dba-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-dbg-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-debuginfo-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-devel-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-embedded-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-enchant-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-fpm-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-gd-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-gmp-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-intl-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-ldap-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-mbstring-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-mysqlnd-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-odbc-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-opcache-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-pdo-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-pgsql-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-process-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-pspell-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-recode-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-snmp-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-soap-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-xml-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:rh-php56-php-xmlrpc-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-bcmath-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-cli-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-common-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-dba-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-dbg-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-debuginfo-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-devel-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-embedded-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-enchant-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-fpm-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-gd-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-gmp-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-intl-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-ldap-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-mbstring-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-mysqlnd-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-odbc-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-opcache-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-pdo-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-pgsql-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-process-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-pspell-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-recode-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-snmp-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-soap-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-xml-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:rh-php56-php-xmlrpc-0:5.6.5-7.el7.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2015-3307

An invalid free flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-3329

A buffer overflow flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-3330

A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interpreter, causing it to crash or, possibly, execute arbitrary code.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-665 - Improper Initialization

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Important

CVE-2015-3411

It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-3412

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4021

An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4022

An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extension parsed file listing FTP server responses. A malicious FTP server could use this flaw to cause a PHP application to crash or, possibly, execute arbitrary code.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4024

A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-407 - Inefficient Algorithmic Complexity

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4025

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4026

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Low

CVE-2015-4598

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4602

A flaw was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4603

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4604

The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4605

The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4643

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Moderate

CVE-2015-4644

The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 211 products, the same list as for CVE-2015-2783

Threats

Impact Low

References

89 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:1187	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213394	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213407	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213442	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213446	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213449	external
https://bugzilla.redhat.com/show_bug.cgi?id=1222485	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223408	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223412	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223422	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223425	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232823	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232897	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232918	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232923	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2015-2783	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213446	external
https://www.cve.org/CVERecord?id=CVE-2015-2783	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2783	external
https://access.redhat.com/security/cve/CVE-2015-3307	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	external
https://www.cve.org/CVERecord?id=CVE-2015-3307	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3307	external
https://access.redhat.com/security/cve/CVE-2015-3329	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213449	external
https://www.cve.org/CVERecord?id=CVE-2015-3329	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3329	external
https://access.redhat.com/security/cve/CVE-2015-3330	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213394	external
https://www.cve.org/CVERecord?id=CVE-2015-3330	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3330	external
https://access.redhat.com/security/cve/CVE-2015-3411	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213407	external
https://www.cve.org/CVERecord?id=CVE-2015-3411	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3411	external
https://access.redhat.com/security/cve/CVE-2015-3412	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232823	external
https://www.cve.org/CVERecord?id=CVE-2015-3412	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3412	external
https://access.redhat.com/security/cve/CVE-2015-4021	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223425	external
https://www.cve.org/CVERecord?id=CVE-2015-4021	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4021	external
https://access.redhat.com/security/cve/CVE-2015-4022	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223412	external
https://www.cve.org/CVERecord?id=CVE-2015-4022	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4022	external
https://access.redhat.com/security/cve/CVE-2015-4024	self
https://bugzilla.redhat.com/show_bug.cgi?id=1222485	external
https://www.cve.org/CVERecord?id=CVE-2015-4024	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4024	external
https://access.redhat.com/security/cve/CVE-2015-4025	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223408	external
https://www.cve.org/CVERecord?id=CVE-2015-4025	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4025	external
https://access.redhat.com/security/cve/CVE-2015-4026	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223422	external
https://www.cve.org/CVERecord?id=CVE-2015-4026	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4026	external
https://access.redhat.com/security/cve/CVE-2015-4598	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232897	external
https://www.cve.org/CVERecord?id=CVE-2015-4598	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4598	external
https://access.redhat.com/security/cve/CVE-2015-4602	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232923	external
https://www.cve.org/CVERecord?id=CVE-2015-4602	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4602	external
https://access.redhat.com/security/cve/CVE-2015-4603	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232918	external
https://www.cve.org/CVERecord?id=CVE-2015-4603	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4603	external
https://access.redhat.com/security/cve/CVE-2015-4604	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213442	external
https://www.cve.org/CVERecord?id=CVE-2015-4604	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4604	external
https://access.redhat.com/security/cve/CVE-2015-4605	self
https://www.cve.org/CVERecord?id=CVE-2015-4605	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4605	external
https://access.redhat.com/security/cve/CVE-2015-4643	self
https://bugzilla.redhat.com/show_bug.cgi?id=1234938	external
https://www.cve.org/CVERecord?id=CVE-2015-4643	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4643	external
https://access.redhat.com/security/cve/CVE-2015-4644	self
https://bugzilla.redhat.com/show_bug.cgi?id=1234940	external
https://www.cve.org/CVERecord?id=CVE-2015-4644	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4644	external

JSON

To clipboard

Loading 1.0 MB of JSON…

CVE-2015-2783 (GCVE-0-2015-2783)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 05:24

Summary

ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74239	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032146	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugs.php.net/bug.php?id=69324	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.ubuntu.com/usn/USN-2572-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:24:38.930Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74239",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74239"
          },
          {
            "name": "1032146",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032146"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69324"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "USN-2572-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2572-1"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "openSUSE-SU-2015:0855",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74239",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74239"
        },
        {
          "name": "1032146",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032146"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69324"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "USN-2572-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2572-1"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "openSUSE-SU-2015:0855",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2783",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74239",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74239"
            },
            {
              "name": "1032146",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032146"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69324",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69324"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "USN-2572-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2572-1"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "openSUSE-SU-2015:0855",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2783",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-03-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:24:38.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3307 (GCVE-0-2015-3307)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 05:39

Summary

The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

11 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74703	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=69443	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:32.047Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74703",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74703"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69443"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74703",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74703"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69443"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3307",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74703",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74703"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69443",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69443"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3307",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-04-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:32.047Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3329 (GCVE-0-2015-3329)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 05:47

Summary

Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74240	vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://bugs.php.net/bug.php?id=69441	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1032145	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.ubuntu.com/usn/USN-2572-1	vendor-advisoryx_refsource_UBUNTU
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:47:57.783Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74240",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74240"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "1032145",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032145"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "USN-2572-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2572-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f59b67ae50064560d7bfcdb0d6a8ab284179053c"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "openSUSE-SU-2015:0855",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74240",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74240"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "1032145",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032145"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "USN-2572-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2572-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f59b67ae50064560d7bfcdb0d6a8ab284179053c"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "openSUSE-SU-2015:0855",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3329",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74240",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74240"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69441",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69441"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "1032145",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032145"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "USN-2572-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2572-1"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=f59b67ae50064560d7bfcdb0d6a8ab284179053c",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=f59b67ae50064560d7bfcdb0d6a8ab284179053c"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "openSUSE-SU-2015:0855",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3329",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-04-17T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:47:57.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3330 (GCVE-0-2015-3330)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 05:47

Summary

The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a "deconfigured interpreter."

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74204	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1033703	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=69218	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68486	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2572-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://openwall.com/lists/oss-security/2015/04/17/7	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:47:57.725Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74204",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74204"
          },
          {
            "name": "1033703",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033703"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69218"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68486"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=809610f5ea38a83b284e1125d1fff129bdd615e7"
          },
          {
            "name": "USN-2572-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2572-1"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "openSUSE-SU-2015:0855",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
          },
          {
            "name": "[oss-security] 20150417 Re: CVE Request: PHP potential remote code execution with apache 2.4 apache2handler",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/04/17/7"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a \"deconfigured interpreter.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74204",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74204"
        },
        {
          "name": "1033703",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033703"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69218"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68486"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=809610f5ea38a83b284e1125d1fff129bdd615e7"
        },
        {
          "name": "USN-2572-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2572-1"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "openSUSE-SU-2015:0855",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
        },
        {
          "name": "[oss-security] 20150417 Re: CVE Request: PHP potential remote code execution with apache 2.4 apache2handler",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/04/17/7"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3330",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a \"deconfigured interpreter.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74204",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74204"
            },
            {
              "name": "1033703",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033703"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69218",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69218"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68486",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68486"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=809610f5ea38a83b284e1125d1fff129bdd615e7",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=809610f5ea38a83b284e1125d1fff129bdd615e7"
            },
            {
              "name": "USN-2572-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2572-1"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "openSUSE-SU-2015:0855",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
            },
            {
              "name": "[oss-security] 20150417 Re: CVE Request: PHP potential remote code execution with apache 2.4 apache2handler",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/04/17/7"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3330",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-04-17T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:47:57.725Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3411 (GCVE-0-2015-3411)

Vulnerability from cvelistv5 – Published: 2016-05-16 10:00 – Updated: 2024-08-06 05:47

Summary

PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032709	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=69353	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.securityfocus.com/bid/75255	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:47:57.804Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "1032709",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032709"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69353"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "75255",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75255"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\\0.xml attack that bypasses an intended configuration in which client users may read only .xml files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "1032709",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032709"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69353"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "75255",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75255"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3411",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\\0.xml attack that bypasses an intended configuration in which client users may read only .xml files."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "1032709",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032709"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69353",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69353"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=4435b9142ff9813845d5c97ab29a5d637bedb257",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=4435b9142ff9813845d5c97ab29a5d637bedb257"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "75255",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75255"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3411",
    "datePublished": "2016-05-16T10:00:00.000Z",
    "dateReserved": "2015-04-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:47:57.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3412 (GCVE-0-2015-3412)

Vulnerability from cvelistv5 – Published: 2016-05-16 10:00 – Updated: 2024-08-06 05:47

Summary

PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032709	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=69353	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/75250	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:47:57.712Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "1032709",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032709"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69353"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "75250",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75250"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "1032709",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032709"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69353"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "75250",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75250"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3412",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "1032709",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032709"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69353",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69353"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=4435b9142ff9813845d5c97ab29a5d637bedb257",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=4435b9142ff9813845d5c97ab29a5d637bedb257"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "75250",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75250"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3412",
    "datePublished": "2016-05-16T10:00:00.000Z",
    "dateReserved": "2015-04-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:47:57.712Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4021 (GCVE-0-2015-4021)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 06:04

Summary

The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1219.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.securityfocus.com/bid/74700	vdb-entryx_refsource_BID
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securitytracker.com/id/1032433	vdb-entryx_refsource_SECTRACK
https://bugs.php.net/bug.php?id=69453	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-05-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:04:02.980Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "RHSA-2015:1219",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2015:0993",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "74700",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74700"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "1032433",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032433"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69453"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "FEDORA-2015-8383",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
          },
          {
            "name": "FEDORA-2015-8281",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
          },
          {
            "name": "FEDORA-2015-8370",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \\0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "RHSA-2015:1219",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2015:0993",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "74700",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74700"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "1032433",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032433"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69453"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "FEDORA-2015-8383",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
        },
        {
          "name": "FEDORA-2015-8281",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
        },
        {
          "name": "FEDORA-2015-8370",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4021",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \\0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "RHSA-2015:1219",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2015:0993",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "74700",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74700"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "1032433",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032433"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69453",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69453"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "FEDORA-2015-8383",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
            },
            {
              "name": "FEDORA-2015-8281",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
            },
            {
              "name": "FEDORA-2015-8370",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4021",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-05-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:04:02.980Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4022 (GCVE-0-2015-4022)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 06:04

Summary

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=69545	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1219.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securitytracker.com/id/1032433	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74902	vdb-entryx_refsource_BID
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-05-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:04:02.660Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69545"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "RHSA-2015:1219",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2015:0993",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "1032433",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032433"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "74902",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "FEDORA-2015-8383",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
          },
          {
            "name": "FEDORA-2015-8281",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
          },
          {
            "name": "FEDORA-2015-8370",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69545"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "RHSA-2015:1219",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2015:0993",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "1032433",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032433"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "74902",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "FEDORA-2015-8383",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
        },
        {
          "name": "FEDORA-2015-8281",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
        },
        {
          "name": "FEDORA-2015-8370",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4022",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69545",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69545"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "RHSA-2015:1219",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2015:0993",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "1032433",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032433"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "74902",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74902"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "FEDORA-2015-8383",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
            },
            {
              "name": "FEDORA-2015-8281",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
            },
            {
              "name": "FEDORA-2015-8370",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4022",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-05-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:04:02.660Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4024 (GCVE-0-2015-4024)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 06:04

Summary

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

19 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74903	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032432	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1219.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
https://bugs.php.net/bug.php?id=69364	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-05-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:04:02.812Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74903",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74903"
          },
          {
            "name": "1032432",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032432"
          },
          {
            "name": "RHSA-2015:1219",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "openSUSE-SU-2015:0993",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69364"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "FEDORA-2015-8383",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
          },
          {
            "name": "FEDORA-2015-8281",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
          },
          {
            "name": "FEDORA-2015-8370",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74903",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74903"
        },
        {
          "name": "1032432",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032432"
        },
        {
          "name": "RHSA-2015:1219",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "openSUSE-SU-2015:0993",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69364"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "FEDORA-2015-8383",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
        },
        {
          "name": "FEDORA-2015-8281",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
        },
        {
          "name": "FEDORA-2015-8370",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4024",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74903",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74903"
            },
            {
              "name": "1032432",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032432"
            },
            {
              "name": "RHSA-2015:1219",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "openSUSE-SU-2015:0993",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69364",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69364"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "FEDORA-2015-8383",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
            },
            {
              "name": "FEDORA-2015-8281",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
            },
            {
              "name": "FEDORA-2015-8370",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4024",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-05-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:04:02.812Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4025 (GCVE-0-2015-4025)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 06:04

Summary

PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=69418	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1219.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74904	vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032431	vdb-entryx_refsource_SECTRACK
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO

Date Public

2015-05-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:04:02.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69418"
          },
          {
            "name": "RHSA-2015:1219",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
          },
          {
            "name": "74904",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74904"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "1032431",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032431"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "FEDORA-2015-8383",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
          },
          {
            "name": "FEDORA-2015-8281",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
          },
          {
            "name": "FEDORA-2015-8370",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69418"
        },
        {
          "name": "RHSA-2015:1219",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
        },
        {
          "name": "74904",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74904"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "1032431",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032431"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "FEDORA-2015-8383",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
        },
        {
          "name": "FEDORA-2015-8281",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
        },
        {
          "name": "FEDORA-2015-8370",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4025",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69418",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69418"
            },
            {
              "name": "RHSA-2015:1219",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1219.html"
            },
            {
              "name": "74904",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74904"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "1032431",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032431"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "FEDORA-2015-8383",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html"
            },
            {
              "name": "FEDORA-2015-8281",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html"
            },
            {
              "name": "FEDORA-2015-8370",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4025",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-05-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:04:02.539Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2015:1187

CVE-2015-2783 (GCVE-0-2015-2783)

CVE-2015-3307 (GCVE-0-2015-3307)

CVE-2015-3329 (GCVE-0-2015-3329)

CVE-2015-3330 (GCVE-0-2015-3330)

CVE-2015-3411 (GCVE-0-2015-3411)

CVE-2015-3412 (GCVE-0-2015-3412)

CVE-2015-4021 (GCVE-0-2015-4021)

CVE-2015-4022 (GCVE-0-2015-4022)

CVE-2015-4024 (GCVE-0-2015-4024)

CVE-2015-4025 (GCVE-0-2015-4025)

Tags

Sightings

Nomenclature

Related by attack behaviour