PT-2016-2118 · Php · Php

Publicado 2016-05-21 · Atualizado 2022-03-01 · CVE-2015-8880

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions 7.0.0 through 7.0.0

Description The issue is related to a double free vulnerability in the format printer component of the PHP interpreter. This vulnerability can be exploited by a remote attacker to trigger an error in the application, potentially causing unspecified impact.

Recommendations For PHP versions 7.0.0 through 7.0.0, update to version 7.0.1 or later to resolve the issue.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

BDU:2016-01471

CVE-2015-8880

Produtos afetados

Php

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2015-8880 · Nota de Segurança
• https://t.me/cvenotify/27542 · Publicação no Telegram
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8880 · Nota
• http://php.net/ChangeLog-7.php · Aviso do Fabricante
• https://secure.php.net/ChangeLog-7.php#7.0.1 · Nota
• https://bdu.fstec.ru/vul/2016-01471 · Nota de Segurança