DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2015-03-19
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand hervorzurufen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-2331US | high7.5 | — | ||
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x befor… | ||||
| CVE-2015-2305US | medium6.8 | — | ||
Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other pro… | ||||
02
references
External citations — patches, advisories, analysis.
- HP-UX Security Bulletin HPSBUX03337 SSRT102066 rev.1external
- Red Hat Security Advisory RHSA-2015:1066-2 vom 2015-06-05external
- Mandriva Security Advisory MDVSA-2015:079 vom 2015-03-28external
- Mandriva Security Advisory MDVSA-2015:080 vom 2015-03-28external
- PHP 5 ChangeLog (Version 5.4.39) vom 2015-03-19external
- PHP 5 ChangeLog (Version 5.5.23) vom 2015-03-19external
- PHP 5 ChangeLog (Version5.6.7) vom 2015-03-19external
- Ubuntu Security Notice USN-2572-1 vom 2015-04-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan