CVE-2015-0231

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.
References
Link Resource
http://advisories.mageia.org/MGASA-2015-0040.html
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html
http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html
http://marc.info/?l=bugtraq&m=143403519711434&w=2
http://marc.info/?l=bugtraq&m=143403519711434&w=2
http://marc.info/?l=bugtraq&m=143748090628601&w=2
http://marc.info/?l=bugtraq&m=144050155601375&w=2
http://rhn.redhat.com/errata/RHSA-2015-1053.html
http://rhn.redhat.com/errata/RHSA-2015-1066.html
http://rhn.redhat.com/errata/RHSA-2015-1135.html
http://www.debian.org/security/2015/dsa-3195
http://www.mandriva.com/security/advisories?name=MDVSA-2015:032
http://www.mandriva.com/security/advisories?name=MDVSA-2015:079
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
http://www.php.net/ChangeLog-5.php
http://www.securityfocus.com/bid/72539
https://bugs.php.net/bug.php?id=68710 Exploit Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1185397
https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd Patch Vendor Advisory
https://security.gentoo.org/glsa/201503-03
https://security.gentoo.org/glsa/201606-10
https://support.apple.com/HT205267
http://advisories.mageia.org/MGASA-2015-0040.html
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html
http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html
http://marc.info/?l=bugtraq&m=143403519711434&w=2
http://marc.info/?l=bugtraq&m=143403519711434&w=2
http://marc.info/?l=bugtraq&m=143748090628601&w=2
http://marc.info/?l=bugtraq&m=144050155601375&w=2
http://rhn.redhat.com/errata/RHSA-2015-1053.html
http://rhn.redhat.com/errata/RHSA-2015-1066.html
http://rhn.redhat.com/errata/RHSA-2015-1135.html
http://www.debian.org/security/2015/dsa-3195
http://www.mandriva.com/security/advisories?name=MDVSA-2015:032
http://www.mandriva.com/security/advisories?name=MDVSA-2015:079
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
http://www.php.net/ChangeLog-5.php
http://www.securityfocus.com/bid/72539
https://bugs.php.net/bug.php?id=68710 Exploit Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1185397
https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd Patch Vendor Advisory
https://security.gentoo.org/glsa/201503-03
https://security.gentoo.org/glsa/201606-10
https://support.apple.com/HT205267
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.12:rc1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.12:rc2:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.13:rc1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.15:rc1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.17:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.18:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.19:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.20:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.21:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.22:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.23:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.24:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.25:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.26:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.27:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.28:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.29:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.30:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.34:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.4.35:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.15:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.16:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.17:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*

History

21 Nov 2024, 02:22

Type Values Removed Values Added
References () http://advisories.mageia.org/MGASA-2015-0040.html - () http://advisories.mageia.org/MGASA-2015-0040.html -
References () http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - () http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html - () http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html -
References () http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html - () http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html -
References () http://marc.info/?l=bugtraq&m=143403519711434&w=2 - () http://marc.info/?l=bugtraq&m=143403519711434&w=2 -
References () http://marc.info/?l=bugtraq&m=143748090628601&w=2 - () http://marc.info/?l=bugtraq&m=143748090628601&w=2 -
References () http://marc.info/?l=bugtraq&m=144050155601375&w=2 - () http://marc.info/?l=bugtraq&m=144050155601375&w=2 -
References () http://rhn.redhat.com/errata/RHSA-2015-1053.html - () http://rhn.redhat.com/errata/RHSA-2015-1053.html -
References () http://rhn.redhat.com/errata/RHSA-2015-1066.html - () http://rhn.redhat.com/errata/RHSA-2015-1066.html -
References () http://rhn.redhat.com/errata/RHSA-2015-1135.html - () http://rhn.redhat.com/errata/RHSA-2015-1135.html -
References () http://www.debian.org/security/2015/dsa-3195 - () http://www.debian.org/security/2015/dsa-3195 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2015:032 - () http://www.mandriva.com/security/advisories?name=MDVSA-2015:032 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - () http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 -
References () http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - () http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html -
References () http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - () http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html -
References () http://www.php.net/ChangeLog-5.php - () http://www.php.net/ChangeLog-5.php -
References () http://www.securityfocus.com/bid/72539 - () http://www.securityfocus.com/bid/72539 -
References () https://bugs.php.net/bug.php?id=68710 - Exploit, Vendor Advisory () https://bugs.php.net/bug.php?id=68710 - Exploit, Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=1185397 - () https://bugzilla.redhat.com/show_bug.cgi?id=1185397 -
References () https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd - Patch, Vendor Advisory () https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd - Patch, Vendor Advisory
References () https://security.gentoo.org/glsa/201503-03 - () https://security.gentoo.org/glsa/201503-03 -
References () https://security.gentoo.org/glsa/201606-10 - () https://security.gentoo.org/glsa/201606-10 -
References () https://support.apple.com/HT205267 - () https://support.apple.com/HT205267 -

Information

Published : 2015-01-27 20:03

Updated : 2024-11-21 02:22


NVD link : CVE-2015-0231

Mitre link : CVE-2015-0231

CVE.ORG link : CVE-2015-0231


JSON object : View

Products Affected

php

  • php