Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-2331
HistoryMar 30, 2015 - 10:59 a.m.

CVE-2015-2331

2015-03-3010:59:00
CWE-189
[email protected]
web.nvd.nist.gov
133
cve
2015
2331
integer overflow
libzip
zip extension
php
denial of service
buffer overflow
nvd

9.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.953 High

EPSS

Percentile

99.3%

JSON

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.

References

Related

fedora 9
nessus 29
openvas 21
checkpoint_advisories 1
archlinux 1
debiancve 1
ubuntucve 1
hackerone 1
prion 1
freebsd 2
securityvulns 5
debian 4
f5 2
rosalinux 2
osv 3
mageia 1
amazon 3
kaspersky 2
slackware 1
cloudlinux 1
fedora
fedora
[SECURITY] Fedora 21 Update: libzip-0.11.2-5.fc21
2015-04-21 19:28:27
[SECURITY] Fedora 22 Update: php-5.6.7-2.fc22
2015-03-26 22:08:56
[SECURITY] Fedora 22 Update: libzip-0.11.2-5.fc22
2015-04-17 02:29:38
nessus
nessus
Fedora 20 : php-5.5.23-1.fc20 (2015-4216)
2015-04-03 00:00:00
SUSE SLED12 / SLES12 Security Update : libzip (SUSE-SU-2015:0668-1)
2015-05-20 00:00:00
FreeBSD : libzip -- integer overflow (264749ae-d565-11e4-b545-00269ee29e57)
2015-03-30 00:00:00
openvas
openvas
Fedora Update for mingw-libzip FEDORA-2015-4565
2015-04-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0668-1)
2021-04-19 00:00:00
Fedora Update for libzip FEDORA-2015-4699
2015-04-22 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Group PHP ZIP Integer Overflow (CVE-2015-2331)
2015-04-14 00:00:00
archlinux
archlinux
php: integer overflow
2015-03-28 00:00:00
debiancve
debiancve
CVE-2015-2331
2015-03-30 10:59:00
ubuntucve
ubuntucve
CVE-2015-2331
2015-03-30 00:00:00
hackerone
hackerone
Internet Bug Bounty: ZIP Integer Overflow leads to writing past heap boundary
2015-03-18 00:00:00
prion
prion
Integer overflow
2015-03-30 10:59:00
freebsd
freebsd
libzip -- integer overflow
2015-03-18 00:00:00
Several vulnerabilities found in PHP
2015-03-19 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3198-1] php5 security update
2015-03-21 00:00:00
PHP multiple security vulnerabilities
2015-03-21 00:00:00
[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities
2015-09-14 00:00:00
debian
debian
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
[SECURITY] [DSA 3198-1] php5 security update
2015-03-20 17:31:08
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
f5
f5
K16714 : PHP vulnerabilities CVE-2015-2301 and CVE-2015-2331
2015-06-08 00:00:00
SOL16714 - PHP vulnerabilities CVE-2015-2301 and CVE-2015-2331
2015-06-08 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1907
2021-07-02 17:26:08
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
osv
osv
php5 - regression update
2015-03-20 00:00:00
php5 - security update
2015-03-20 00:00:00
php5 - security update
2015-04-29 00:00:00
mageia
mageia
Updated php and libzip packages fix security vulnerabilities
2015-04-04 14:13:35
amazon
amazon
Important: php56
2015-04-15 21:50:00
Important: php55
2015-04-15 21:49:00
Important: php54
2015-04-15 21:49:00
kaspersky
kaspersky
KLA10515 Multiple vulnerabilities in PHP and extensions
2015-03-30 00:00:00
KLA10514 Multiple vulnerabilities in PHP and plugins
2015-03-30 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00

9.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.953 High

EPSS

Percentile

99.3%

JSON
Related for CVE-2015-2331
fedora9nessus29openvas21checkpoint_advisories1archlinux1debiancve1ubuntucve1hackerone1prion1freebsd2securityvulns5debian4f52rosalinux2osv3mageia1amazon3kaspersky2slackware1cloudlinux1