PT-2015-3242 · Php+4 · Php+4

Publicado

2015-06-17

·

Atualizado

2019-04-22

·

CVE-2015-4604

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PHP versions 5.x through 5.4.39 PHP versions 5.5.x through 5.5.23 PHP versions 5.6.x through 5.6.7
Description The issue arises from the mget function in softmagic.c, part of the Fileinfo component in PHP, which does not properly maintain a certain pointer relationship. This allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code via a crafted string. The vulnerability can be exploited by a remote attacker using a specially crafted string that is mishandled by a "Python script text executable" rule.
Recommendations For PHP versions 5.x through 5.4.39, update to version 5.4.40 or later. For PHP versions 5.5.x through 5.5.23, update to version 5.5.24 or later. For PHP versions 5.6.x through 5.6.7, update to version 5.6.8 or later.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2016-01365
CESA-2015_1135
CVE-2015-4604
DLA-307-1
OPENSUSE-SU-2015_1197-1
RHSA-2015:1066
RHSA-2015:1135
RHSA-2015:1186
RHSA-2015:1187
RHSA-2015_1135
USN-2658-1

Produtos afetados

Centos
Php
Red Hat
Suse
Ubuntu