DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2015-09-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Code mit den Rechten des Dienstes auszuführen, um einen Denial of Service Zustand hervorrufen oder um Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-6838US | high7.5 | — | ||
The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not conside… | ||||
| CVE-2015-6837US | high7.5 | — | ||
The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not conside… | ||||
| CVE-2015-6835US | critical9.8 | Exploit | ||
The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute a… | ||||
| CVE-2015-6834US | critical9.8 | Exploit | ||
Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (… | ||||
| CVE-2015-6836US | high7.3 | — | ||
The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers t… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2015:1701-1 vom 2015-10-08external
- PHP 5 ChangeLog vom 2015-09-07external
- Debian Security Advisory DSA-3358 vom 2015-09-14 vom 2015-09-13external
- Ubuntu Security Notice USN-2758-1 vom 2015-09-30external
- F5 Security Advisory SOL17377 vom 2015-10-09external
- WID-SEC-W-2025-1425 - CSAF Versionself
- WID-SEC-2025-1425 - Portal Versionself
- Dell Security Advisory DSA-2025-269 vom 2025-07-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan