6.8

CVE-2015-3330

Exploit
The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a "deconfigured interpreter."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Linux Version 6
Oracle ≫ Linux Version 7
Oracle ≫ Solaris Version 11.2
Apple ≫ macOS X Version <= 10.10.4
Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0
Php ≫ Php Version <= 5.4.39
Php ≫ Php Version 5.5.0
Php ≫ Php Version 5.5.0 Update alpha1
Php ≫ Php Version 5.5.0 Update alpha2
Php ≫ Php Version 5.5.0 Update alpha3
Php ≫ Php Version 5.5.0 Update alpha4
Php ≫ Php Version 5.5.0 Update alpha5
Php ≫ Php Version 5.5.0 Update alpha6
Php ≫ Php Version 5.5.0 Update beta1
Php ≫ Php Version 5.5.0 Update beta2
Php ≫ Php Version 5.5.0 Update beta3
Php ≫ Php Version 5.5.0 Update beta4
Php ≫ Php Version 5.5.0 Update rc1
Php ≫ Php Version 5.5.0 Update rc2
Php ≫ Php Version 5.5.1
Php ≫ Php Version 5.5.2
Php ≫ Php Version 5.5.3
Php ≫ Php Version 5.5.4
Php ≫ Php Version 5.5.5
Php ≫ Php Version 5.5.6
Php ≫ Php Version 5.5.7
Php ≫ Php Version 5.5.8
Php ≫ Php Version 5.5.9
Php ≫ Php Version 5.5.10
Php ≫ Php Version 5.5.11
Php ≫ Php Version 5.5.12
Php ≫ Php Version 5.5.13
Php ≫ Php Version 5.5.14
Php ≫ Php Version 5.5.18
Php ≫ Php Version 5.5.19
Php ≫ Php Version 5.5.20
Php ≫ Php Version 5.5.21
Php ≫ Php Version 5.5.22
Php ≫ Php Version 5.5.23
Php ≫ Php Version 5.6.0 Update alpha1
Php ≫ Php Version 5.6.0 Update alpha2
Php ≫ Php Version 5.6.0 Update alpha3
Php ≫ Php Version 5.6.0 Update alpha4
Php ≫ Php Version 5.6.0 Update alpha5
Php ≫ Php Version 5.6.0 Update beta1
Php ≫ Php Version 5.6.0 Update beta2
Php ≫ Php Version 5.6.0 Update beta3
Php ≫ Php Version 5.6.0 Update beta4
Php ≫ Php Version 5.6.2
Php ≫ Php Version 5.6.3
Php ≫ Php Version 5.6.4
Php ≫ Php Version 5.6.5
Php ≫ Php Version 5.6.6
Php ≫ Php Version 5.6.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.08% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
Mailing List
https://support.apple.com/kb/HT205031
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
Third Party Advisory
http://www.securitytracker.com/id/1033703
https://support.apple.com/HT205267
Third Party Advisory
http://php.net/ChangeLog-5.php
Patch
http://rhn.redhat.com/errata/RHSA-2015-1066.html
http://rhn.redhat.com/errata/RHSA-2015-1135.html
Third Party Advisory
https://security.gentoo.org/glsa/201606-10
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
http://www.ubuntu.com/usn/USN-2572-1
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html
http://rhn.redhat.com/errata/RHSA-2015-1186.html
http://rhn.redhat.com/errata/RHSA-2015-1187.html
Third Party Advisory
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=809610f5ea38a83b284e1125d1fff129bdd615e7
http://openwall.com/lists/oss-security/2015/04/17/7
Third Party Advisory
http://www.securityfocus.com/bid/74204
https://bugs.php.net/bug.php?id=68486
Permissions Required
https://bugs.php.net/bug.php?id=69218
Exploit