CVE-2015-6831
HIGH
7.3
CVSS 3.1
Description
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
Affected products and versions
- PHP — Before 5.4.44
- PHP — From 5.5.0 (including) to 5.5.28 (excluding)
- PHP — From 5.6.0 (including) to 5.6.12 (excluding)
References
- www.debian.org http://www.debian.org/security/2015/dsa-3344
- www.openwall.com http://www.openwall.com/lists/oss-security/2015/08/19/3
- www.php.net http://www.php.net/ChangeLog-5.php
- www.securityfocus.com http://www.securityfocus.com/bid/76737
- bugs.php.net https://bugs.php.net/bug.php?id=70155
- bugs.php.net https://bugs.php.net/bug.php?id=70166
- bugs.php.net https://bugs.php.net/bug.php?id=70168
- bugs.php.net https://bugs.php.net/bug.php?id=70169
- security.gentoo.org https://security.gentoo.org/glsa/201606-10
- nvd.nist.gov Official NVD record