CVE-2015-8865
HIGH
7.3
CVSS 3.0
Description
The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file.
Affected products and versions
- PHP — Up to and including 5.5.33
- PHP versions 5.6.0alpha1, 5.6.0alpha2, 5.6.0alpha3, 5.6.0alpha4, 5.6.0alpha5, 5.6.0beta1, 5.6.0beta2, 5.6.0beta3, 5.6.0beta4, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8, 5.6.9, 5.6.10, 5.6.11, 5.6.12, 5.6.13, 5.6.14, 5.6.15, 5.6.16, 5.6.17, 5.6.18, 5.6.19, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4
References
- bugs.gw.com http://bugs.gw.com/view.php?id=522
- git.php.net http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fe13566c93f118a15a96320a546c7878fd0cfc5e
- lists.apple.com http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-2750.html
- www.debian.org http://www.debian.org/security/2016/dsa-3560
- www.openwall.com http://www.openwall.com/lists/oss-security/2016/04/24/1
- www.php.net http://www.php.net/ChangeLog-5.php
- www.php.net http://www.php.net/ChangeLog-7.php
- www.securityfocus.com http://www.securityfocus.com/bid/85802
- www.ubuntu.com http://www.ubuntu.com/usn/USN-2952-1
- www.ubuntu.com http://www.ubuntu.com/usn/USN-2952-2
- bugs.php.net https://bugs.php.net/bug.php?id=71527 Exploit
- github.com https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36
- h20566.www2.hpe.com https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
- security.gentoo.org https://security.gentoo.org/glsa/201611-22
- security.gentoo.org https://security.gentoo.org/glsa/201701-42
- support.apple.com https://support.apple.com/HT206567
- usn.ubuntu.com https://usn.ubuntu.com/3686-1/
- usn.ubuntu.com https://usn.ubuntu.com/3686-2/
- nvd.nist.gov Official NVD record