CVE-2015-4116 Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a fa...
CriticalCVSS 9.8
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE leap | = 42.1 | No fix listed |
| PHP | <= 5.5.26 | No fix listed |
| PHP | = 5.6.0 | No fix listed |
| PHP | = 5.6.1 | No fix listed |
| PHP | = 5.6.2 | No fix listed |
| PHP | = 5.6.3 | No fix listed |
| PHP | = 5.6.4 | No fix listed |
| PHP | = 5.6.5 | No fix listed |
| PHP | = 5.6.6 | No fix listed |
| PHP | = 5.6.7 | No fix listed |
| PHP | = 5.6.8 | No fix listed |
| PHP | = 5.6.9 | No fix listed |
| PHP | = 5.6.10 | No fix listed |
References
- git.php.net
- openSUSE-SU-2016:1524 vendor-advisory
- php.net
- bugs.php.net exploit
- www.htbridge.com exploit