Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-6832
HistoryJan 19, 2016 - 5:59 a.m.

CVE-2015-6832

2016-01-1905:59:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
142
cve-2015-6832
php
spl
unserialize
vulnerability
remote code execution

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.9%

JSON

Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.

Related

hackerone 1
prion 1
ubuntucve 1
openvas 14
nessus 17
freebsd 1
thn 1
amazon 3
suse 2
osv 2
kaspersky 2
debian 1
ubuntu 1
veracode 11
redhat 1
gentoo 1
rosalinux 1
hackerone
hackerone
Internet Bug Bounty: Dangling pointer in the unserialization of ArrayObject items
2015-07-13 00:00:00
prion
prion
Design/Logic Flaw
2016-01-19 05:59:00
ubuntucve
ubuntucve
CVE-2015-6832
2015-08-27 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities - 01 (Mar 2016) - Windows
2016-03-01 00:00:00
PHP Multiple Vulnerabilities - 01 (Mar 2016) - Linux
2016-03-01 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-583)
2015-09-08 00:00:00
nessus
nessus
FreeBSD : php5 -- multiple vulnerabilities (787ef75e-44da-11e5-93ad-002590263bf5)
2015-08-18 00:00:00
PHP 5.4.x < 5.4.44 Multiple Vulnerabilities
2015-08-11 00:00:00
Amazon Linux AMI : php56 (ALAS-2015-585) (BACKRONYM)
2015-08-18 00:00:00
freebsd
freebsd
php5 -- multiple vulnerabilities
2015-08-06 00:00:00
thn
thn
3 Critical Zero-Day Flaws Found in PHP 7 — One Remains Unpatched!
2016-12-28 23:45:00
amazon
amazon
Medium: php55
2015-08-17 12:41:00
Medium: php54
2015-08-17 12:39:00
Medium: php56
2015-08-17 12:46:00
suse
suse
Security update for php5 (important)
2015-09-25 11:09:46
Security update for php5 (important)
2015-09-25 15:09:56
osv
osv
php5 - security update
2015-08-27 00:00:00
php5 - security update
2015-11-08 00:00:00
kaspersky
kaspersky
KLA10747 Obsolete PHP version in XAMPP & WAMP
2016-01-19 00:00:00
KLA10746 Multiple vulnerabilities in PHP
2016-01-19 00:00:00
debian
debian
[SECURITY] [DLA 341-1] php5 security update
2015-11-08 18:51:20
ubuntu
ubuntu
PHP vulnerabilities
2015-09-30 00:00:00
veracode
veracode
Use After Free
2019-05-02 05:27:42
Denial Of Service (DoS)
2019-05-02 05:27:42
Path Traversal
2019-05-02 05:27:42
redhat
redhat
(RHSA-2016:0457) Moderate: rh-php56-php security update
2016-03-15 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.9%

JSON
Related for CVE-2015-6832
hackerone1prion1ubuntucve1openvas14nessus17freebsd1thn1amazon3suse2osv2kaspersky2debian1ubuntu1veracode11redhat1gentoo1rosalinux1