PT-2015-3096 · Php+2 · Php+2

Taoguangchen

·

Published

2015-08-27

·

Updated

2022-08-05

·

CVE-2015-6831

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.44 PHP versions 5.5.x prior to 5.5.28 PHP versions 5.6.x prior to 5.6.12
Description The issue is related to multiple use-after-free vulnerabilities in the SPL library of the PHP interpreter, which can be exploited by a remote attacker to execute arbitrary code. This can be achieved through vectors involving the ArrayObject, SplObjectStorage, and SplDoublyLinkedList classes, which are mishandled during unserialization.
Recommendations For PHP versions prior to 5.4.44, update to version 5.4.44 or later. For PHP versions 5.5.x prior to 5.5.28, update to version 5.5.28 or later. For PHP versions 5.6.x prior to 5.6.12, update to version 5.6.12 or later. As a temporary workaround, consider restricting the use of the ArrayObject, SplObjectStorage, and SplDoublyLinkedList classes during unserialization until a patch is available.

Exploit

Fix

RCE

Use After Free

Weakness Enumeration

Related Identifiers

BDU:2016-00306
CVE-2015-6831
DLA-341-1
DSA-3344-1
OPENSUSE-SU-2015_1628-1
RHSA-2016:0457
SUSE-SU-2015:1633-1
SUSE-SU-2015:1818-1
SUSE-SU-2015_1818-1
SUSE-SU-2016:1638-1
USN-2758-1

Affected Products

Php
Suse
Ubuntu