PT-2015-3436 · Php+2 · Php+2

Publicado 2015-01-26 · Atualizado 2024-06-15 · CVE-2015-1351

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.8

Description The issue is related to a use-after-free vulnerability in the zend shared memdup function. This vulnerability can be exploited by a remote attacker to cause a denial of service or possibly have other unspecified impacts.

Recommendations For PHP versions prior to 5.6.8, update to version 5.6.8 or later to resolve the issue.

Exploit

Correção

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2022-02654

CVE-2015-1351

MGASA-2015-0090

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2015:1053

RHSA-2015:1066

SUSE-SU-2019:1746-1

SUSE-SU-2019_1746-1

USN-2501-1

Produtos afetados

Php

Suse

Ubuntu

Referências · 186

• 🔥 https://bugs.php.net/bug.php?id=68677 · Exploit
• https://suse.com/security/cve/CVE-2014-3622 · Nota
• https://suse.com/security/cve/CVE-2019-9020 · Nota
• https://suse.com/security/cve/CVE-2010-2225 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1351 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-3710 · Nota
• https://suse.com/security/cve/CVE-2006-1494 · Nota
• https://suse.com/security/cve/CVE-2015-3415 · Nota
• https://suse.com/security/cve/CVE-2020-7063 · Nota
• https://suse.com/security/cve/CVE-2012-2336 · Nota
• https://suse.com/security/cve/CVE-2019-11039 · Nota
• https://suse.com/security/cve/CVE-2011-3379 · Nota
• http://oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1352 · Nota de Segurança