CVE-2015-2301

Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
debiandebian_linux
7.0
opensuseopensuse
13.1
opensuseopensuse
13.2
phpphp
5.4.0 ≤
𝑥
< 5.4.40
phpphp
5.5.0 ≤
𝑥
< 5.5.22
phpphp
5.6.0 ≤
𝑥
< 5.6.6
applemac_os_x
𝑥
≤ 10.10.4
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_hpc_node
7.0
redhatenterprise_linux_hpc_node_eus
7.1
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_eus
7.1
redhatenterprise_linux_workstation
7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
php5
lucid
Fixed 5.3.2-1ubuntu4.29
released
precise
Fixed 5.3.10-1ubuntu3.17
released
trusty
Fixed 5.5.9+dfsg-1ubuntu4.7
released
utopic
Fixed 5.5.12+dfsg-2ubuntu4.3
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
php
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-bcmath
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-cli
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-common
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-dba
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-devel
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-embedded
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-enchant
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-fpm
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-gd
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-imap
RHEL 6
0:5.3.3-46.el6_6
fixed
php-intl
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-ldap
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-mbstring
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-mysql
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-mysqlnd
RHEL 7
0:5.4.16-36.el7_1
fixed
php-odbc
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-pdo
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-pgsql
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-process
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-pspell
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-recode
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-snmp
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-soap
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-tidy
RHEL 6
0:5.3.3-46.el6_6
fixed
php-xml
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-xmlrpc
RHEL 6
0:5.3.3-46.el6_6
fixed
RHEL 7
0:5.4.16-36.el7_1
fixed
php-zts
RHEL 6
0:5.3.3-46.el6_6
fixed
References