Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-8878
HistoryMay 22, 2016 - 1:59 a.m.

CVE-2015-8878

2016-05-2201:59:00
CWE-119
CWE-362
[email protected]
web.nvd.nist.gov
55
php
cve
denial of service
security vulnerability
heap memory corruption
race condition

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

48.2%

JSON

main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.

CPENameOperatorVersion
php:phpphplt5.5.28
php:phpphplt5.6.12

Related

openvas 2
prion 1
ubuntucve 1
osv 1
debian 1
nessus 2
openvas
openvas
PHP Denial of Service Vulnerability - 01 - Jul16 (Linux)
2016-07-14 00:00:00
PHP Denial of Service Vulnerability - 01 - Jul16 (Windows)
2016-07-14 00:00:00
prion
prion
Race condition
2016-05-22 01:59:00
ubuntucve
ubuntucve
CVE-2015-8878
2016-05-22 00:00:00
osv
osv
php5 - security update
2016-05-31 00:00:00
debian
debian
[SECURITY] [DLA 499-1] php5 security update
2016-05-31 20:07:56
nessus
nessus
Debian DLA-499-1 : php5 security update
2016-06-01 00:00:00
PHP 5.5.x < 5.5.37 / 5.6.x < 5.6.23 / 7.0.x < 7.0.8 Multiple Vulnerabilities
2016-07-13 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

48.2%

JSON
Related for CVE-2015-8878
openvas2prion1ubuntucve1osv1debian1nessus2