[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2015-1351Date: (C)2015-04-01   (M)2024-04-19


Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-71929
APPLE-SA-2015-09-30-3
GLSA-201606-10
MDVSA-2015:079
RHSA-2015:1053
RHSA-2015:1066
http://openwall.com/lists/oss-security/2015/01/24/9
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
https://bugs.php.net/bug.php?id=68677
https://support.apple.com/HT205267

CPE    5
cpe:/o:apple:mac_os_x
cpe:/a:php:php
cpe:/o:oracle:linux:6
cpe:/o:oracle:linux:7
...
CWE    1
CWE-416
OVAL    15
oval:org.secpod.oval:def:108765
oval:org.secpod.oval:def:108766
oval:org.secpod.oval:def:76839
oval:org.secpod.oval:def:702420
...

© SecPod Technologies