7.5

CVE-2015-2301

Exploit
Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version10.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Debian ≫ Debian Linux Version7.0
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Php ≫ Php Version >= 5.4.0 < 5.4.40
Php ≫ Php Version >= 5.5.0 < 5.5.22
Php ≫ Php Version >= 5.6.0 < 5.6.6
Apple ≫ macOS X Version <= 10.10.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.77% 0.963
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
Third Party Advisory
http://marc.info/?l=bugtraq&m=144050155601375&w=2
Third Party Advisory
Mailing List
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
Third Party Advisory
Mailing List
https://support.apple.com/HT205267
Third Party Advisory
http://php.net/ChangeLog-5.php
Vendor Advisory
http://marc.info/?l=bugtraq&m=143403519711434&w=2
Third Party Advisory
Mailing List
http://marc.info/?l=bugtraq&m=143748090628601&w=2
Third Party Advisory
Mailing List
http://www.ubuntu.com/usn/USN-2535-1
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1053.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1066.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1135.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1218.html
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:079
Third Party Advisory
https://security.gentoo.org/glsa/201606-10
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2015/03/15/6
Exploit
Mailing List
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b
http://www.debian.org/security/2015/dsa-3198
Third Party Advisory
http://www.securityfocus.com/bid/73037
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031949
Third Party Advisory
VDB Entry
https://bugs.php.net/bug.php?id=68901
Vendor Advisory
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1194747
Third Party Advisory
Issue Tracking