CVE-2015-4605 The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, w...
HighCVSS 7.5
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 5.4.39 | No fix listed |
| PHP | = 5.5.0 | No fix listed |
| PHP | = 5.5.1 | No fix listed |
| PHP | = 5.5.2 | No fix listed |
| PHP | = 5.5.3 | No fix listed |
| PHP | = 5.5.4 | No fix listed |
| PHP | = 5.5.5 | No fix listed |
| PHP | = 5.5.6 | No fix listed |
| PHP | = 5.5.7 | No fix listed |
| PHP | = 5.5.8 | No fix listed |
| PHP | = 5.5.9 | No fix listed |
| PHP | = 5.5.10 | No fix listed |
| PHP | = 5.5.11 | No fix listed |
| PHP | = 5.5.12 | No fix listed |
| PHP | = 5.5.13 | No fix listed |
| PHP | = 5.5.14 | No fix listed |
| PHP | = 5.5.15 | No fix listed |
| PHP | = 5.5.16 | No fix listed |
| PHP | = 5.5.17 | No fix listed |
| PHP | = 5.5.18 | No fix listed |
| PHP | = 5.5.19 | No fix listed |
| PHP | = 5.5.20 | No fix listed |
| PHP | = 5.5.21 | No fix listed |
| PHP | = 5.5.22 | No fix listed |
| PHP | = 5.5.23 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 5.6.0 | No fix listed |
| PHP | = 5.6.1 | No fix listed |
| PHP | = 5.6.2 | No fix listed |
| PHP | = 5.6.3 | No fix listed |
| PHP | = 5.6.4 | No fix listed |
| PHP | = 5.6.5 | No fix listed |
| PHP | = 5.6.6 | No fix listed |
| PHP | = 5.6.7 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux hpc node eus | = 7.1 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server eus | = 7.1 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
References
- git.php.net
- php.net
- RHSA-2015:1135 vendor-advisory
- RHSA-2015:1186 vendor-advisory
- RHSA-2015:1187 vendor-advisory
- [oss-security] 20150616 Re: CVE Request: various issues in PHP mailing-list
- www.oracle.com
- 75233 vdb-entry
- 1032709 vdb-entry
- bugs.php.net exploit
- Debian Security Tracker CVE-2015-4605 vendor-advisory