Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2015-2783
HistoryJun 09, 2015 - 6:59 p.m.

Design/Logic Flaw

2015-06-0918:59:00
PRIOn knowledge base
www.prio-n.com
5

7.1 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.039 Low

EPSS

Percentile

91.7%

JSON

ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.

References

Related

veracode 20
f5 2
ubuntucve 2
hackerone 1
cve 1
openvas 25
nessus 36
archlinux 1
suse 3
securityvulns 7
mageia 1
fedora 3
amazon 1
freebsd 1
ubuntu 1
debian 2
osv 2
slackware 1
ibm 1
redhat 5
oraclelinux 4
centos 2
gentoo 1
rosalinux 1
veracode
veracode
Denial Of Service
2019-01-15 09:06:21
Arbitrary File Write
2019-05-02 05:39:55
Arbitrary File Write
2019-05-02 05:39:55
f5
f5
K17200 : PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
SOL17200 - PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
ubuntucve
ubuntucve
CVE-2015-2783
2015-04-17 00:00:00
CVE-2015-3307
2015-06-09 00:00:00
hackerone
hackerone
Internet Bug Bounty: Buffer Over-read in unserialize when parsing Phar
2015-03-29 00:00:00
cve
cve
CVE-2015-2783
2015-06-09 18:59:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0169)
2022-01-28 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2015:0855-1)
2015-06-09 00:00:00
Fedora Update for php FEDORA-2015-6407
2015-04-24 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2015:209)
2015-04-28 00:00:00
Fedora 21 : php-5.6.8-1.fc21 (2015-6407)
2015-04-24 00:00:00
openSUSE Security Update : php5 (openSUSE-2015-352)
2015-05-13 00:00:00
archlinux
archlinux
php: multiple issues
2015-04-17 00:00:00
suse
suse
Security update for php5 (important)
2015-05-12 17:05:25
Security update for php5 (important)
2015-05-13 15:07:04
Security update for php53 (important)
2016-06-21 13:08:17
securityvulns
securityvulns
[ MDVSA-2015:209 ] php
2015-05-05 00:00:00
PHP security vulnerabilities
2015-05-05 00:00:00
[SECURITY] [DSA 3280-1] php5 security update
2015-06-08 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2015-04-25 23:15:07
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.8-1.fc21
2015-04-23 16:11:13
[SECURITY] Fedora 22 Update: php-5.6.8-1.fc22
2015-04-22 22:52:07
[SECURITY] Fedora 20 Update: php-5.5.24-1.fc20
2015-04-27 08:39:40
amazon
amazon
Important: php54
2015-04-17 12:04:00
freebsd
freebsd
Several vulnerabilities found in PHP
2015-04-16 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2015-04-20 00:00:00
debian
debian
[SECURITY] [DSA 3280-1] php5 security update
2015-06-07 17:06:52
[SECURITY] [DLA 212-1] php5 security update
2015-04-29 20:45:33
osv
osv
php5 - security update
2015-06-07 00:00:00
php5 - security update
2015-04-29 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
ibm
ibm
Security Bulletin: IBM Tealeaf Customer Experience PCA Web UI PHP security issues
2018-06-16 19:50:01
redhat
redhat
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
oraclelinux
oraclelinux
php55-php security update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

7.1 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.039 Low

EPSS

Percentile

91.7%

JSON
Related for PRION:CVE-2015-2783
veracode20f52ubuntucve2hackerone1cve1openvas25nessus36archlinux1suse3securityvulns7mageia1fedora3amazon1freebsd1ubuntu1debian2osv2slackware1ibm1redhat5oraclelinux4centos2gentoo1rosalinux1