Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-2783
HistoryJun 09, 2015 - 6:59 p.m.

CVE-2015-2783

2015-06-0918:59:00
CWE-119
[email protected]
web.nvd.nist.gov
97
php
cve-2015-2783
information disclosure
denial of service
vulnerability
nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

7.1 High

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%

JSON

ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.

Affected configurations

NVD
Node
phpphpRange≤5.4.39
OR
phpphpMatch5.5.0
OR
phpphpMatch5.5.0alpha1
OR
phpphpMatch5.5.0alpha2
OR
phpphpMatch5.5.0alpha3
OR
phpphpMatch5.5.0alpha4
OR
phpphpMatch5.5.0alpha5
OR
phpphpMatch5.5.0alpha6
OR
phpphpMatch5.5.0beta1
OR
phpphpMatch5.5.0beta2
OR
phpphpMatch5.5.0beta3
OR
phpphpMatch5.5.0beta4
OR
phpphpMatch5.5.0rc1
OR
phpphpMatch5.5.0rc2
OR
phpphpMatch5.5.1
OR
phpphpMatch5.5.2
OR
phpphpMatch5.5.3
OR
phpphpMatch5.5.4
OR
phpphpMatch5.5.5
OR
phpphpMatch5.5.6
OR
phpphpMatch5.5.7
OR
phpphpMatch5.5.8
OR
phpphpMatch5.5.9
OR
phpphpMatch5.5.10
OR
phpphpMatch5.5.11
OR
phpphpMatch5.5.12
OR
phpphpMatch5.5.13
OR
phpphpMatch5.5.14
OR
phpphpMatch5.5.18
OR
phpphpMatch5.5.19
OR
phpphpMatch5.5.20
OR
phpphpMatch5.5.21
OR
phpphpMatch5.5.22
OR
phpphpMatch5.5.23
OR
phpphpMatch5.6.0alpha1
OR
phpphpMatch5.6.0alpha2
OR
phpphpMatch5.6.0alpha3
OR
phpphpMatch5.6.0alpha4
OR
phpphpMatch5.6.0alpha5
OR
phpphpMatch5.6.0beta1
OR
phpphpMatch5.6.0beta2
OR
phpphpMatch5.6.0beta3
OR
phpphpMatch5.6.0beta4
OR
phpphpMatch5.6.2
OR
phpphpMatch5.6.3
OR
phpphpMatch5.6.4
OR
phpphpMatch5.6.5
OR
phpphpMatch5.6.6
OR
phpphpMatch5.6.7
Node
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_hpc_nodeMatch7.0
OR
redhatenterprise_linux_hpc_node_eusMatch7.1
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_eusMatch7.1
OR
redhatenterprise_linux_workstationMatch7.0
Node
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
Node
applemac_os_xRange≤10.10.5

References

Related

f5 2
ubuntucve 2
hackerone 1
prion 1
cvelist 1
nvd 1
veracode 20
suse 3
mageia 1
securityvulns 7
archlinux 1
openvas 25
nessus 37
fedora 3
freebsd 1
amazon 1
ubuntu 1
debian 2
osv 2
slackware 1
ibm 1
redhat 5
oraclelinux 4
centos 2
gentoo 1
rosalinux 1
f5
f5
SOL17200 - PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
K17200 : PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
ubuntucve
ubuntucve
CVE-2015-2783
2015-04-17 00:00:00
CVE-2015-3307
2015-06-09 00:00:00
hackerone
hackerone
Internet Bug Bounty: Buffer Over-read in unserialize when parsing Phar
2015-03-29 00:00:00
prion
prion
Design/Logic Flaw
2015-06-09 18:59:00
cvelist
cvelist
CVE-2015-2783
2015-06-09 18:00:00
nvd
nvd
CVE-2015-2783
2015-06-09 18:59:00
veracode
veracode
Denial Of Service
2019-01-15 09:06:21
Improper Input Validation
2019-05-02 05:39:56
Heap-based Buffer Overflow
2019-05-02 05:39:55
suse
suse
Security update for php5 (important)
2015-05-12 17:05:25
Security update for php5 (important)
2015-05-13 15:07:04
Security update for php53 (important)
2016-06-21 13:08:17
mageia
mageia
Updated php packages fix security vulnerabilities
2015-04-25 23:15:07
securityvulns
securityvulns
[ MDVSA-2015:209 ] php
2015-05-05 00:00:00
PHP security vulnerabilities
2015-05-05 00:00:00
[SECURITY] [DSA 3280-1] php5 security update
2015-06-08 00:00:00
archlinux
archlinux
php: multiple issues
2015-04-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for php5 (openSUSE-SU-2015:0855-1)
2015-06-09 00:00:00
Fedora Update for php FEDORA-2015-6407
2015-04-24 00:00:00
Mageia: Security Advisory (MGASA-2015-0169)
2022-01-28 00:00:00
nessus
nessus
Fedora 21 : php-5.6.8-1.fc21 (2015-6407)
2015-04-24 00:00:00
openSUSE Security Update : php5 (openSUSE-2015-352)
2015-05-13 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2015:209)
2015-04-28 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.8-1.fc21
2015-04-23 16:11:13
[SECURITY] Fedora 22 Update: php-5.6.8-1.fc22
2015-04-22 22:52:07
[SECURITY] Fedora 20 Update: php-5.5.24-1.fc20
2015-04-27 08:39:40
freebsd
freebsd
Several vulnerabilities found in PHP
2015-04-16 00:00:00
amazon
amazon
Important: php54
2015-04-17 12:04:00
ubuntu
ubuntu
PHP vulnerabilities
2015-04-20 00:00:00
debian
debian
[SECURITY] [DSA 3280-1] php5 security update
2015-06-07 17:06:52
[SECURITY] [DLA 212-1] php5 security update
2015-04-29 20:45:33
osv
osv
php5 - security update
2015-06-07 00:00:00
php5 - security update
2015-04-29 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
ibm
ibm
Security Bulletin: IBM Tealeaf Customer Experience PCA Web UI PHP security issues
2018-06-16 19:50:01
redhat
redhat
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
oraclelinux
oraclelinux
php55-php security update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

7.1 High

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%

JSON
Related for CVE-2015-2783
f52ubuntucve2hackerone1prion1cvelist1nvd1veracode20suse3mageia1securityvulns7archlinux1openvas25nessus37fedora3freebsd1amazon1ubuntu1debian2osv2slackware1ibm1redhat5oraclelinux4centos2gentoo1rosalinux1