PT-2016-1131 · Php · Php

Publicado

2016-01-19

·

Atualizado

2016-01-22

·

CVE-2015-8616

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.0.1
Description The issue is related to a use-after-free vulnerability in the Collator::sortWithSortKeys function. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts. The vulnerability leverages the relationships between a key buffer and a destroyed array.
Recommendations For PHP versions prior to 7.0.1, update to version 7.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Collator::sortWithSortKeys function until a patch is applied.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2016-00390
CVE-2015-8616

Produtos afetados

Php