CVEvulnerability
CVE-2015-6831
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-01-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
Affected configurations
• php php (< 5.4.44)
• php php (>= 5.5.0 < 5.5.28)
• php php (>= 5.6.0 < 5.6.12)
• debian debian linux 7.0
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://www.debian.org/security/2015/dsa-3344 www.debian.org
- http://www.openwall.com/lists/oss-security/2015/08/19/3 www.openwall.com
- http://www.php.net/ChangeLog-5.php www.php.net
- http://www.securityfocus.com/bid/76737 www.securityfocus.com
- https://bugs.php.net/bug.php?id=70155 bugs.php.net
- https://bugs.php.net/bug.php?id=70166 bugs.php.net
- https://bugs.php.net/bug.php?id=70168 bugs.php.net
- https://bugs.php.net/bug.php?id=70169 bugs.php.net
- https://security.gentoo.org/glsa/201606-10 security.gentoo.org
- http://www.debian.org/security/2015/dsa-3344 www.debian.org
- http://www.openwall.com/lists/oss-security/2015/08/19/3 www.openwall.com
- http://www.php.net/ChangeLog-5.php www.php.net
- http://www.securityfocus.com/bid/76737 www.securityfocus.com
- https://bugs.php.net/bug.php?id=70155 bugs.php.net
- https://bugs.php.net/bug.php?id=70166 bugs.php.net
- https://bugs.php.net/bug.php?id=70168 bugs.php.net
- https://bugs.php.net/bug.php?id=70169 bugs.php.net
- https://security.gentoo.org/glsa/201606-10 security.gentoo.org