CVE-2015-1351

2015-03-3010:59:00

CWE-416

[email protected]

web.nvd.nist.gov

cve-2015-1351

use-after-free vulnerability

zend_shared_memdup

php

nvd

security vulnerability

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.145 Low

EPSS

Percentile

95.7%

JSON

Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CPENameOperatorVersion
oracle:secure_backuporacle secure backuple12.1.0.1.0
apple:mac_os_xapple mac os xle10.6.8
php:phpphplt5.5.24
php:phpphplt5.6.8
oracle:solarisoracle solariseq11.2
oracle:linuxoracle linuxeq6
oracle:linuxoracle linuxeq7

CPE	Name	Operator	Version
oracle:secure_backup	oracle secure backup	le	12.1.0.1.0
apple:mac_os_x	apple mac os x	le	10.6.8
php:php	php	lt	5.5.24
php:php	php	lt	5.6.8
oracle:solaris	oracle solaris	eq	11.2
oracle:linux	oracle linux	eq	6
oracle:linux	oracle linux	eq	7