Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-0273
HistoryMar 30, 2015 - 10:59 a.m.

CVE-2015-0273

2015-03-3010:59:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
159
In Wild
2
cve-2015-0273
php
use-after-free
vulnerabilities
remote code execution
serialized input
nvd

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.955 High

EPSS

Percentile

99.4%

JSON

Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.

References

Social References

More

Related

attackerkb 1
packetstorm 1
zdt 1
f5 2
exploitpack 1
ubuntucve 1
checkpoint_advisories 1
prion 1
exploitdb 1
amazon 2
openvas 27
nessus 38
suse 4
freebsd 1
fedora 2
mageia 1
securityvulns 8
ubuntu 1
debian 1
osv 1
kaspersky 1
ibm 1
veracode 27
oraclelinux 4
redhat 4
centos 2
gentoo 1
rosalinux 1
attackerkb
attackerkb
CVE-2015-0273
2015-03-30 00:00:00
packetstorm
packetstorm
PHP DateTime Use-After-Free
2015-02-20 00:00:00
zdt
zdt
PHP DateTime Use After Free Vulnerability
2015-02-23 00:00:00
f5
f5
SOL16336 - PHP vulnerability CVE-2015-0273
2015-04-02 00:00:00
K16336 : PHP vulnerability CVE-2015-0273
2015-04-02 00:00:00
exploitpack
exploitpack
PHP DateTime - Use-After-Free
2015-02-23 00:00:00
ubuntucve
ubuntucve
CVE-2015-0273
2015-02-23 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Date Time Object Unserialize Memory Corruption (CVE-2015-0273)
2015-03-08 00:00:00
prion
prion
Design/Logic Flaw
2015-03-30 10:59:00
exploitdb
exploitdb
PHP DateTime - Use-After-Free
2015-02-23 00:00:00
amazon
amazon
Critical: php54
2015-03-13 10:00:00
Critical: php55
2015-03-23 08:29:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2015-494)
2015-09-08 00:00:00
PHP Multiple Remote Code Execution Vulnerabilities (Jul 2015) - Linux
2015-07-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0424-1)
2021-06-09 00:00:00
nessus
nessus
FreeBSD : php5 -- multiple vulnerabilities (f7a9e415-bdca-11e4-970c-000c292ee6b8) (GHOST)
2015-02-27 00:00:00
Amazon Linux AMI : php55 (ALAS-2015-494) (GHOST)
2015-03-25 00:00:00
SUSE SLES12 Security Update : php5 (SUSE-SU-2015:0424-1)
2019-01-02 00:00:00
suse
suse
Security update for php5 (important)
2015-03-06 11:04:50
Security update for php5 (important)
2015-03-04 16:04:57
Security update for PHP 5.3 (important)
2015-03-05 21:04:56
freebsd
freebsd
php5 -- multiple vulnerabilities
2015-02-18 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.6-1.fc21
2015-02-23 23:28:40
[SECURITY] Fedora 20 Update: php-5.5.22-1.fc20
2015-03-04 10:24:35
mageia
mageia
Updated php packages fix security vulnerabilities
2015-03-04 00:16:02
securityvulns
securityvulns
[USN-2535-1] PHP vulnerabilities
2015-03-18 00:00:00
PHP multiple security vulnerabilities
2015-03-21 00:00:00
APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007
2015-10-25 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2015-03-18 00:00:00
debian
debian
[SECURITY] [DSA 3195-1] php5 security update
2015-03-18 11:56:46
osv
osv
php5 - security update
2015-03-18 00:00:00
kaspersky
kaspersky
KLA10514 Multiple vulnerabilities in PHP and plugins
2015-03-30 00:00:00
ibm
ibm
Security Bulletin: IBM Tealeaf Customer Experience PCA Web UI PHP security issues
2018-06-16 19:50:01
veracode
veracode
Remote Code Execution (RCE) Via Memory Corruption
2019-05-02 05:39:23
Memory Corruption
2019-05-02 05:39:23
Memory Corruption
2019-05-02 05:39:23
oraclelinux
oraclelinux
php55 security and bug fix update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
redhat
redhat
(RHSA-2015:1053) Moderate: php55 security and bug fix update
2015-06-04 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
(RHSA-2015:1066) Important: php54 security and bug fix update
2015-06-04 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.955 High

EPSS

Percentile

99.4%

JSON
Related for CVE-2015-0273
attackerkb1packetstorm1zdt1f52exploitpack1ubuntucve1checkpoint_advisories1prion1exploitdb1amazon2openvas27nessus38suse4freebsd1fedora2mageia1securityvulns8ubuntu1debian1osv1kaspersky1ibm1veracode27oraclelinux4redhat4centos2gentoo1rosalinux1