PT-2017-1613 · Apache+4 · Apache2Handler+6
Published
2017-03-02
·
Updated
2022-08-16
·
CVE-2015-8994
CVSS v3.1
7.5
High
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 5.6.28
PHP versions prior to 7.0.13
Description
The issue exists due to inadequate access control when inheriting certain classes related to operational code in PHP configurations using apache2handler/mod php or php-fpm with OpCache enabled. This could allow a remote attacker to elevate their privileges. In shared-hosting configurations where PHP interpreters share a common parent process, Zend OpCache creates a shared memory object that can be used by child PHP processes to cache and retrieve compiled script bytecode. This can defeat script file permissions and potentially allow access to sensitive information, such as CMS configurations.
Recommendations
For PHP versions prior to 5.6.28, consider setting opcache.validate permission=1 in a non-default configuration to resolve the issue.
For PHP versions prior to 7.0.13, consider setting opcache.validate permission=1 in a non-default configuration to resolve the issue.
As a temporary workaround, consider disabling the OpCache until a patch is available.
Restrict access to sensitive PHP scripts to minimize the risk of exploitation.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Php
Suse
Ubuntu
Zend Opcache
Apache2Handler
Mod Php
Php-Fpm