CVE-2015-4116
EUVD-2015-414116.05.2016, 10:59
Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| opensuse | leap | 42.1 |
| php | php | 𝑥 ≤ 5.5.26 |
| php | php | 5.6.0 |
| php | php | 5.6.1 |
| php | php | 5.6.2 |
| php | php | 5.6.3 |
| php | php | 5.6.4 |
| php | php | 5.6.5 |
| php | php | 5.6.6 |
| php | php | 5.6.7 |
| php | php | 5.6.8 |
| php | php | 5.6.9 |
| php | php | 5.6.10 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References