PT-2016-3397 · Php+2 · Php+2

CVE-2015-8873

·

Publicado

2016-05-16

·

Atualizado

2022-11-05

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.44 PHP versions 5.5.x prior to 5.5.28 PHP versions 5.6.x prior to 5.6.12
Description The issue is related to a stack consumption problem in the Zend/zend exceptions.c component of PHP, caused by insufficient input validation. This allows remote attackers to cause a denial of service, resulting in a segmentation fault, through recursive method calls.
Recommendations For PHP versions prior to 5.4.44, update to version 5.4.44 or later. For PHP versions 5.5.x prior to 5.5.28, update to version 5.5.28 or later. For PHP versions 5.6.x prior to 5.6.12, update to version 5.6.12 or later.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2022-02519
CVE-2015-8873
OPENSUSE-SU-2016_1553-1
RHSA-2016:2750
SUSE-SU-2016:1504-1
SUSE-SU-2016:1581-1
SUSE-SU-2016:1638-1
USN-3045-1

Produtos afetados

Php
Suse
Ubuntu