Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. (CVE-2015-4022)

Impact

None. F5 products are not affected by this vulnerability.

CPENameOperatorVersion
big-ip gtmeq10.1.0
big-ip gtmeq10.2.0
big-ip gtmeq10.2.1
big-ip gtmeq10.2.2
big-ip gtmeq10.2.3
big-ip gtmeq10.2.4
big-ip gtmeq11.0.0
big-ip gtmeq11.1.0
big-ip gtmeq11.2.0
big-ip gtmeq11.2.1

Name	Operator	Version
big-ip gtm	eq	10.1.0
big-ip gtm	eq	10.2.0
big-ip gtm	eq	10.2.1
big-ip gtm	eq	10.2.2
big-ip gtm	eq	10.2.3
big-ip gtm	eq	10.2.4
big-ip gtm	eq	11.0.0
big-ip gtm	eq	11.1.0
big-ip gtm	eq	11.2.0
big-ip gtm	eq	11.2.1

Rows per page:

1-10 of 191

hackerone 1

f5 3

cve 2

prion 2

ubuntucve 2

checkpoint_advisories 1

nessus 36

securityvulns 6

openvas 27

mageia 1

amazon 3

fedora 3

freebsd 1

debian 2

osv 2

slackware 1

redhat 5

oraclelinux 4

suse 3

veracode 7

ubuntu 1

ibm 4

centos 2

gentoo 1

rosalinux 1

hackerone

Internet Bug Bounty: Integer overflow in ftp_genlist() resulting in heap overflow

2015-04-28 00:00:00

SOL16764 - PHP vulnerability CVE-2015-4022

2015-06-17 00:00:00

K80285422 : PHP vulnerabilities CVE-2015-4642, CVE-2015-4643, and CVE-2015-4644

2016-07-05 00:00:00

SOL80285422 - PHP vulnerabilities CVE-2015-4642, CVE-2015-4643, and CVE-2015-4644

2016-07-05 00:00:00

cve

CVE-2015-4022

2015-06-09 18:59:00

CVE-2015-4643

2016-05-16 10:59:00

prion

Integer overflow

2015-06-09 18:59:00

Integer overflow

2016-05-16 10:59:00

ubuntucve

CVE-2015-4022

2015-06-09 00:00:00

CVE-2015-4643

2015-06-18 00:00:00

checkpoint_advisories

PHP ftp_genlist method Integer Overflow (CVE-2015-4022)

2015-07-01 00:00:00

nessus

openSUSE Security Update : php5 (openSUSE-2015-396)

2015-06-04 00:00:00

PHP 5.6.x < 5.6.9 Multiple Vulnerabilities

2019-01-09 00:00:00

Amazon Linux AMI : php55 (ALAS-2015-535)

2015-06-04 00:00:00

securityvulns

PHP multiple security vulnerabilities

2015-06-13 00:00:00

[SECURITY] [DSA 3280-1] php5 security update

2015-06-08 00:00:00

PHP multiple security vulnerabilities

2015-07-13 00:00:00

openvas

PHP Multiple Vulnerabilities - 02 (Jun 2015) - Windows

2015-06-16 00:00:00

Mageia: Security Advisory (MGASA-2015-0231)

2022-01-28 00:00:00

Amazon Linux: Security Advisory (ALAS-2015-535)

2015-09-08 00:00:00

mageia

Updated php packages fix security vulnerabilities

2015-05-18 22:08:05

amazon

Medium: php55

2015-06-02 22:21:00

Important: php54

2015-06-02 22:20:00

Important: php56

2015-06-02 22:22:00

fedora

[SECURITY] Fedora 22 Update: php-5.6.9-1.fc22

2015-05-26 03:40:42

[SECURITY] Fedora 21 Update: php-5.6.9-1.fc21

2015-05-27 16:13:20

[SECURITY] Fedora 20 Update: php-5.5.25-1.fc20

2015-05-27 16:23:41

freebsd

php -- multiple vulnerabilities

2015-05-14 00:00:00

debian

[SECURITY] [DSA 3280-1] php5 security update

2015-06-07 17:06:52

[SECURITY] [DLA 307-1] php5 security update

2015-09-07 20:21:46

osv

php5 - security update

2015-06-07 00:00:00

php5 - security update

2015-09-07 00:00:00

slackware

[slackware-security] php

2015-06-11 23:01:25

redhat

(RHSA-2015:1219) Moderate: php54-php security update

2015-07-09 00:00:00

(RHSA-2015:1186) Important: php55-php security update

2015-06-25 00:00:00

(RHSA-2015:1187) Important: rh-php56-php security update

2015-06-25 00:00:00

oraclelinux

php54-php security update

2016-02-04 00:00:00

php55-php security update

2016-02-04 00:00:00

php security update

2015-07-09 00:00:00

suse

Security update for php5 (important)

2015-07-17 11:08:12

Security update for php5 (important)

2015-07-17 10:12:10

Security update for php53 (important)

2016-06-21 13:08:17

veracode

Arbitrary File Write

2019-05-02 05:39:55

Heap-based Buffer Overflow

2019-05-02 05:39:55

Denial Of Service (DoS)

2019-05-02 05:39:55

ubuntu

PHP vulnerabilities

2015-07-06 00:00:00

ibm

Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (FSM)

2019-01-31 02:10:01

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by multiple vulnerabilities in GNU C Library (glibc), krb5 and php

2020-11-02 20:22:51

Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module

2019-01-31 02:25:02

centos

php security update

2015-07-09 19:23:41

php security update

2015-06-24 03:28:02

gentoo

PHP: Multiple vulnerabilities

2016-06-19 00:00:00

rosalinux

Advisory ROSA-SA-2021-1950

2021-07-02 17:57:45

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.078 Low

EPSS

Percentile

93.6%

JSON

Related for F5:K16764