CVE-2015-5161 ZendXml and Zend Framework contain XXE and XEE Vulnerabilities
MediumCVSS 6.8
EPSS 9.9%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zendframework/zendframework(Packagist) | >= 2.0.0, < 2.4.6 | 2.4.6 |
| zendframework/zendframework(Packagist) | = 2.0.0 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.1 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.2 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.3 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.4 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.5 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.6 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.7 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.0.8 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.1.0 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.1.1 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.1.2 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.1.3 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.1.4 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.1.5 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.1.6 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.0 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.0rc1 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.0rc2 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.0rc3 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.1 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.10 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.2 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.3 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| zendframework/zendframework(Packagist) | = 2.2.4 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.5 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.6 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.7 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.8 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.2.9 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.0 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.1 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.2 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.3 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.4 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.5 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.6 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.7 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.8 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.3.9 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0rc1 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0rc2 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0rc3 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0rc4 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0rc5 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0rc6 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.0rc7 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.1 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.2 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.3 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.4 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.4.5 | No fix listed |
| zendframework/zendframework(Packagist) | >= 2.5.0, < 2.5.2 | 2.5.2 |
| zendframework/zendframework(Packagist) | = 2.5.0 | No fix listed |
| zendframework/zendframework(Packagist) | = 2.5.1 | No fix listed |
| zendframework/zendframework1(Packagist) | >= 1.12.0, < 1.12.14 | 1.12.14 |
| zendframework/zendframework1(Packagist) | = 1.12.0 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.1 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.10 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.11 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.12 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.13 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.2 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.3 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.4 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.5 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.6 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.7 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.8 | No fix listed |
| zendframework/zendframework1(Packagist) | = 1.12.9 | No fix listed |
| zendframework/zendxml(Packagist) | >= 1.0.0, < 1.0.1 | 1.0.1 |
| zendframework/zendxml(Packagist) | = 1.0.0 | No fix listed |
| zendframework/zendframework(Packagist) | >= 1.12.0, < 1.12.14 | 1.12.14 |
| zend framework | = 1.0.0 | No fix listed |
| zend framework | = 1.0.0-rc1 | No fix listed |
| zend framework | = 1.0.0-rc2 | No fix listed |
| zend framework | = 1.0.0-rc2a | No fix listed |
| zend framework | = 1.0.0-rc3 | No fix listed |
| zend framework | = 1.0.1 | No fix listed |
| zend framework | = 1.0.2 | No fix listed |
| zend framework | = 1.0.3 | No fix listed |
| zend framework | = 1.0.4 | No fix listed |
| zend framework | = 1.5.0-rc1 | No fix listed |
| zend framework | = 1.5.0-rc2 | No fix listed |
| zend framework | = 1.5.0-rc3 | No fix listed |
| zend framework | = 1.5.1 | No fix listed |
| zend framework | = 1.5.2 | No fix listed |
| zend framework | = 1.5.3 | No fix listed |
| zend framework | = 1.6.0 | No fix listed |
| zend framework | = 1.6.0-rc1 | No fix listed |
| zend framework | = 1.6.0-rc2 | No fix listed |
| zend framework | = 1.6.0-rc3 | No fix listed |
| zend framework | = 1.6.1 | No fix listed |
| zend framework | = 1.6.2 | No fix listed |
| zend framework | = 1.7.0 | No fix listed |
| zend framework | = 1.7.0-pl1 | No fix listed |
| zend framework | = 1.7.0-pr | No fix listed |
| zend framework | = 1.7.1 | No fix listed |
| zend framework | = 1.7.2 | No fix listed |
| zend framework | = 1.7.3 | No fix listed |
| zend framework | = 1.7.3-pl1 | No fix listed |
| zend framework | = 1.7.4 | No fix listed |
| zend framework | = 1.7.5 | No fix listed |
| zend framework | = 1.7.6 | No fix listed |
| zend framework | = 1.7.7 | No fix listed |
| zend framework | = 1.7.8 | No fix listed |
| zend framework | = 1.7.9 | No fix listed |
| zend framework | = 1.8.0 | No fix listed |
| zend framework | = 1.8.0-a1 | No fix listed |
| zend framework | = 1.8.0-b1 | No fix listed |
| zend framework | = 1.8.1 | No fix listed |
| zend framework | = 1.8.2 | No fix listed |
| zend framework | = 1.8.3 | No fix listed |
| zend framework | = 1.8.4 | No fix listed |
| zend framework | = 1.8.4-pl1 | No fix listed |
| zend framework | = 1.8.5 | No fix listed |
| zend framework | = 1.9.0 | No fix listed |
| zend framework | = 1.9.0-a1 | No fix listed |
| zend framework | = 1.9.0-b1 | No fix listed |
| zend framework | = 1.9.0-rc1 | No fix listed |
| zend framework | = 1.9.1 | No fix listed |
| zend framework | = 1.9.2 | No fix listed |
| zend framework | = 1.9.3 | No fix listed |
| zend framework | = 1.9.3-pl1 | No fix listed |
| zend framework | = 1.9.4 | No fix listed |
| zend framework | = 1.9.5 | No fix listed |
| zend framework | = 1.9.6 | No fix listed |
| zend framework | = 1.9.7 | No fix listed |
| zend framework | = 1.9.8 | No fix listed |
| zend framework | = 1.10.0 | No fix listed |
| zend framework | = 1.10.0-alpha1 | No fix listed |
| zend framework | = 1.10.0-beta1 | No fix listed |
| zend framework | = 1.10.0-rc1 | No fix listed |
| zend framework | = 1.10.1 | No fix listed |
| zend framework | = 1.10.2 | No fix listed |
| zend framework | = 1.10.3 | No fix listed |
| zend framework | = 1.10.4 | No fix listed |
| zend framework | = 1.10.5 | No fix listed |
| zend framework | = 1.10.6 | No fix listed |
| zend framework | = 1.10.7 | No fix listed |
| zend framework | = 1.10.8 | No fix listed |
| zend framework | = 1.10.9 | No fix listed |
| zend framework | = 1.11.0 | No fix listed |
| zend framework | = 1.11.0-b1 | No fix listed |
| zend framework | = 1.11.0-rc1 | No fix listed |
| zend framework | = 1.11.1 | No fix listed |
| zend framework | = 1.11.2 | No fix listed |
| zend framework | = 1.11.3 | No fix listed |
| zend framework | = 1.11.4 | No fix listed |
| zend framework | = 1.11.5 | No fix listed |
| zend framework | = 1.11.6 | No fix listed |
| zend framework | = 1.11.7 | No fix listed |
| zend framework | = 1.11.8 | No fix listed |
| zend framework | = 1.11.9 | No fix listed |
| zend framework | = 1.11.10 | No fix listed |
| zend framework | = 1.11.11 | No fix listed |
| zend framework | = 1.11.12 | No fix listed |
| zend framework | = 1.11.13 | No fix listed |
| zend framework | = 1.12.0 | No fix listed |
| zend framework | = 1.12.0-rc1 | No fix listed |
| zend framework | = 1.12.0-rc2 | No fix listed |
| zend framework | = 1.12.0-rc3 | No fix listed |
| zend framework | = 1.12.0-rc4 | No fix listed |
| zend framework | = 1.12.1 | No fix listed |
| zend framework | = 1.12.2 | No fix listed |
| zend framework | = 1.12.3 | No fix listed |
| zend framework | = 1.12.4 | No fix listed |
| zend framework | = 1.12.5 | No fix listed |
| zend framework | = 1.12.6 | No fix listed |
| zend framework | = 1.12.7 | No fix listed |
| zend framework | = 1.12.8 | No fix listed |
| zend framework | = 1.12.9 | No fix listed |
| zend framework | = 1.12.10 | No fix listed |
| zend framework | = 1.12.11 | No fix listed |
| zend framework | = 1.12.12 | No fix listed |
| zend framework | = 1.12.13 | No fix listed |
| zend framework | = 2.0.0 | No fix listed |
| zend framework | = 2.0.0-rc1 | No fix listed |
| zend framework | = 2.0.0-rc2 | No fix listed |
| zend framework | = 2.0.0-rc3 | No fix listed |
| zend framework | = 2.0.0-rc4 | No fix listed |
| zend framework | = 2.0.0-rc5 | No fix listed |
| zend framework | = 2.0.0-rc6 | No fix listed |
| zend framework | = 2.0.0-rc7 | No fix listed |
| zend framework | = 2.0.1 | No fix listed |
| zend framework | = 2.0.2 | No fix listed |
| zend framework | = 2.0.3 | No fix listed |
| zend framework | = 2.0.4 | No fix listed |
| zend framework | = 2.0.5 | No fix listed |
| zend framework | = 2.0.6 | No fix listed |
| zend framework | = 2.0.7 | No fix listed |
| zend framework | = 2.1.0 | No fix listed |
| zend framework | = 2.1.1 | No fix listed |
| zend framework | = 2.1.2 | No fix listed |
| zend framework | = 2.1.3 | No fix listed |
| zend framework | = 2.1.4 | No fix listed |
| zend framework | = 2.1.5 | No fix listed |
| zend framework | = 2.1.6 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com
- github.com patch
- github.com patch
- framework.zend.com
- github.com exploit
- github.com exploit
- github.com exploit
- web.archive.org
- 37765 exploit
- framework.zend.com vendor-advisory
- legalhackers.com exploit
- FEDORA-2015-13314 vendor-advisory
- FEDORA-2015-13529 vendor-advisory
- FEDORA-2015-13488 vendor-advisory
- packetstormsecurity.com exploit
- 20150813 Zend Framework <= 2.4.2 XML eXternal Entity Injection (XXE) on PHP FPM exploit mailing-list
- DSA-3340 vendor-advisory
- 76177 exploit vdb-entry
- github.com