9.8

CVE-2015-4643

Exploit

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.

Data is provided by the National Vulnerability Database (NVD)
Php ≫ Php Version < 5.4.42
Php ≫ Php Version >= 5.5.0 < 5.5.26
Php ≫ Php Version >= 5.6.0 < 5.6.10
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Oracle ≫ Linux Version6
Oracle ≫ Linux Version7 Update0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 10.69% 0.93
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://php.net/ChangeLog-5.php
Vendor Advisory
Release Notes
https://bugs.php.net/bug.php?id=69545
Vendor Advisory
Exploit
Issue Tracking
http://www.securitytracker.com/id/1032709
Third Party Advisory
VDB Entry
http://openwall.com/lists/oss-security/2015/06/18/6
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/75291
Third Party Advisory
VDB Entry