CVE-2015-4603 The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected...
CriticalCVSS 9.8
EPSS 10.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 5.4.39 | No fix listed |
| PHP | = 5.5.0 | No fix listed |
| PHP | = 5.5.1 | No fix listed |
| PHP | = 5.5.2 | No fix listed |
| PHP | = 5.5.3 | No fix listed |
| PHP | = 5.5.4 | No fix listed |
| PHP | = 5.5.5 | No fix listed |
| PHP | = 5.5.6 | No fix listed |
| PHP | = 5.5.7 | No fix listed |
| PHP | = 5.5.8 | No fix listed |
| PHP | = 5.5.9 | No fix listed |
| PHP | = 5.5.10 | No fix listed |
| PHP | = 5.5.11 | No fix listed |
| PHP | = 5.5.12 | No fix listed |
| PHP | = 5.5.13 | No fix listed |
| PHP | = 5.5.14 | No fix listed |
| PHP | = 5.5.15 | No fix listed |
| PHP | = 5.5.16 | No fix listed |
| PHP | = 5.5.17 | No fix listed |
| PHP | = 5.5.18 | No fix listed |
| PHP | = 5.5.19 | No fix listed |
| PHP | = 5.5.20 | No fix listed |
| PHP | = 5.5.21 | No fix listed |
| PHP | = 5.5.22 | No fix listed |
| PHP | = 5.5.23 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 5.6.0 | No fix listed |
| PHP | = 5.6.1 | No fix listed |
| PHP | = 5.6.2 | No fix listed |
| PHP | = 5.6.3 | No fix listed |
| PHP | = 5.6.4 | No fix listed |
| PHP | = 5.6.5 | No fix listed |
| PHP | = 5.6.6 | No fix listed |
| PHP | = 5.6.7 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux hpc node eus | = 7.1 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server eus | = 7.1 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
References
- php.net
- RHSA-2015:1135 vendor-advisory
- RHSA-2015:1186 vendor-advisory
- RHSA-2015:1187 vendor-advisory
- RHSA-2015:1218 vendor-advisory
- [oss-security] 20150616 Re: CVE Request: various issues in PHP mailing-list
- www.oracle.com
- 75252 vdb-entry
- 1032709 vdb-entry
- bugs.php.net exploit