Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-2331
HistoryMar 30, 2015 - 10:59 a.m.

CVE-2015-2331

2015-03-3010:59:12
CWE-189
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.953 High

EPSS

Percentile

99.4%

JSON

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.

Affected configurations

NVD
Node
nihlibzipRange≤0.11.2
Node
phpphpRange≤5.4.38
OR
phpphpMatch5.5.0
OR
phpphpMatch5.5.0alpha1
OR
phpphpMatch5.5.0alpha2
OR
phpphpMatch5.5.0alpha3
OR
phpphpMatch5.5.0alpha4
OR
phpphpMatch5.5.0alpha5
OR
phpphpMatch5.5.0alpha6
OR
phpphpMatch5.5.0beta1
OR
phpphpMatch5.5.0beta2
OR
phpphpMatch5.5.0beta3
OR
phpphpMatch5.5.0beta4
OR
phpphpMatch5.5.0rc1
OR
phpphpMatch5.5.0rc2
OR
phpphpMatch5.5.1
OR
phpphpMatch5.5.2
OR
phpphpMatch5.5.3
OR
phpphpMatch5.5.4
OR
phpphpMatch5.5.5
OR
phpphpMatch5.5.6
OR
phpphpMatch5.5.7
OR
phpphpMatch5.5.8
OR
phpphpMatch5.5.9
OR
phpphpMatch5.5.10
OR
phpphpMatch5.5.11
OR
phpphpMatch5.5.12
OR
phpphpMatch5.5.13
OR
phpphpMatch5.5.14
OR
phpphpMatch5.5.15
OR
phpphpMatch5.5.16
OR
phpphpMatch5.5.17
OR
phpphpMatch5.5.18
OR
phpphpMatch5.5.19
OR
phpphpMatch5.5.20
OR
phpphpMatch5.5.21
OR
phpphpMatch5.5.22
OR
phpphpMatch5.6.0alpha1
OR
phpphpMatch5.6.0alpha2
OR
phpphpMatch5.6.0alpha3
OR
phpphpMatch5.6.0alpha4
OR
phpphpMatch5.6.0alpha5
OR
phpphpMatch5.6.0beta1
OR
phpphpMatch5.6.0beta2
OR
phpphpMatch5.6.0beta3
OR
phpphpMatch5.6.0beta4
OR
phpphpMatch5.6.1
OR
phpphpMatch5.6.2
OR
phpphpMatch5.6.3
OR
phpphpMatch5.6.4
OR
phpphpMatch5.6.5
OR
phpphpMatch5.6.6
Node
debiandebian_linuxMatch7.0
OR
fedoraprojectfedoraMatch22
OR
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2

References

Related

freebsd 2
openvas 21
fedora 9
prion 1
hackerone 1
cvelist 1
nessus 29
ubuntucve 1
checkpoint_advisories 1
cve 1
archlinux 1
debiancve 1
osv 3
f5 2
rosalinux 2
debian 4
securityvulns 5
amazon 3
kaspersky 2
mageia 1
slackware 1
cloudlinux 1
freebsd
freebsd
libzip -- integer overflow
2015-03-18 00:00:00
Several vulnerabilities found in PHP
2015-03-19 00:00:00
openvas
openvas
Fedora Update for libzip FEDORA-2015-4699
2015-04-22 00:00:00
Fedora Update for mingw-libzip FEDORA-2015-4559
2015-07-07 00:00:00
Fedora Update for mingw-libzip FEDORA-2015-4669
2015-04-06 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-libzip-0.11.2-3.fc21
2015-04-05 14:31:52
[SECURITY] Fedora 20 Update: mingw-libzip-0.11.2-3.fc20
2015-04-05 14:33:09
[SECURITY] Fedora 20 Update: libzip-0.11.2-5.fc20
2015-04-21 19:00:28
prion
prion
Integer overflow
2015-03-30 10:59:00
hackerone
hackerone
Internet Bug Bounty: ZIP Integer Overflow leads to writing past heap boundary
2015-03-18 00:00:00
cvelist
cvelist
CVE-2015-2331
2015-03-30 10:00:00
nessus
nessus
Fedora 21 : libzip-0.11.2-5.fc21 (2015-4699)
2015-04-22 00:00:00
Fedora 22 : libzip-0.11.2-5.fc22 (2015-4553)
2015-04-17 00:00:00
Fedora 21 : mingw-libzip-0.11.2-3.fc21 (2015-4565)
2015-04-07 00:00:00
ubuntucve
ubuntucve
CVE-2015-2331
2015-03-30 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Group PHP ZIP Integer Overflow (CVE-2015-2331)
2015-04-14 00:00:00
cve
cve
CVE-2015-2331
2015-03-30 10:59:12
archlinux
archlinux
php: integer overflow
2015-03-28 00:00:00
debiancve
debiancve
CVE-2015-2331
2015-03-30 10:59:12
osv
osv
php5 - regression update
2015-03-20 00:00:00
php5 - security update
2015-03-20 00:00:00
php5 - security update
2015-04-29 00:00:00
f5
f5
SOL16714 - PHP vulnerabilities CVE-2015-2301 and CVE-2015-2331
2015-06-08 00:00:00
K16714 : PHP vulnerabilities CVE-2015-2301 and CVE-2015-2331
2015-06-08 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1907
2021-07-02 17:26:08
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
debian
debian
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
[SECURITY] [DSA 3198-1] php5 security update
2015-03-20 17:31:08
securityvulns
securityvulns
[SECURITY] [DSA 3198-1] php5 security update
2015-03-21 00:00:00
PHP multiple security vulnerabilities
2015-03-21 00:00:00
[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities
2015-09-14 00:00:00
amazon
amazon
Important: php54
2015-04-15 21:49:00
Important: php56
2015-04-15 21:50:00
Important: php55
2015-04-15 21:49:00
kaspersky
kaspersky
KLA10515 Multiple vulnerabilities in PHP and extensions
2015-03-30 00:00:00
KLA10514 Multiple vulnerabilities in PHP and plugins
2015-03-30 00:00:00
mageia
mageia
Updated php and libzip packages fix security vulnerabilities
2015-04-04 14:13:35
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.953 High

EPSS

Percentile

99.4%

JSON
Related for NVD:CVE-2015-2331
freebsd2openvas21fedora9prion1hackerone1cvelist1nessus29ubuntucve1checkpoint_advisories1cve1archlinux1debiancve1osv3f52rosalinux2debian4securityvulns5amazon3kaspersky2mageia1slackware1cloudlinux1