Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2015-7803
HistoryDec 11, 2015 - 12:00 p.m.

Null pointer dereference

2015-12-1112:00:00
PRIOn knowledge base
www.prio-n.com
3

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.6%

JSON

The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.

CPENameOperatorVersion
mac_os_xle10.11.1
phpeq5.6.1
phpeq5.6.5
phpeq5.6.12
phpeq5.6.13
phpeq5.6.4
phpeq5.6.6
phpeq5.6.11
phpeq5.6.2
phpeq5.6.10
Rows per page:
1-10 of 151

Related

hackerone 1
cve 1
ubuntucve 1
nessus 23
openvas 18
osv 2
securityvulns 2
f5 2
debian 2
ubuntu 1
freebsd 1
slackware 1
amazon 2
suse 3
veracode 11
redhat 1
gentoo 1
rosalinux 1
hackerone
hackerone
Internet Bug Bounty: Null pointer dereference in phar_get_fp_offset()
2015-05-28 00:00:00
cve
cve
CVE-2015-7803
2015-12-11 12:00:00
ubuntucve
ubuntucve
CVE-2015-7803
2015-10-12 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2786-1)
2015-10-29 00:00:00
SUSE SLES12 Security Update : php5 (SUSE-SU-2016:0284-1)
2019-01-02 00:00:00
PHP 5.5.x < 5.5.30 Multiple Vulnerabilities
2015-10-06 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:0284-1)
2021-06-09 00:00:00
Debian Security Advisory DSA 3380-1 (php5 - security update)
2015-10-27 00:00:00
PHP Multiple Denial of Service Vulnerabilities - 01 (Dec 2015) - Windows
2015-12-15 00:00:00
osv
osv
php5 - security update
2015-10-27 00:00:00
php5 - security update
2015-11-08 00:00:00
securityvulns
securityvulns
[USN-2786-1] PHP vulnerabilities
2015-11-02 00:00:00
PHP security vulnerabilities
2015-11-02 00:00:00
f5
f5
K17503 : PHP vulnerabilities CVE-2015-7803 and CVE-2015-7804
2015-10-29 00:00:00
SOL17503 - PHP vulnerabilities CVE-2015-7803 and CVE-2015-7804
2015-10-29 00:00:00
debian
debian
[SECURITY] [DSA 3380-1] php5 security update
2015-10-27 18:43:43
[SECURITY] [DLA 341-1] php5 security update
2015-11-08 18:51:20
ubuntu
ubuntu
PHP vulnerabilities
2015-10-28 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2015-10-01 00:00:00
slackware
slackware
[slackware-security] php
2016-02-04 00:07:13
amazon
amazon
Medium: php55
2015-10-20 14:52:00
Medium: php56
2015-10-20 14:50:00
suse
suse
Security update for php53 (important)
2016-04-25 19:08:08
Security update for php53 (important)
2016-06-14 20:07:58
Security update for php53 (important)
2016-06-21 13:08:17
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:27:42
Use-After-Free
2019-05-02 05:27:42
Denial Of Service (DoS)
2019-05-02 05:27:42
redhat
redhat
(RHSA-2016:0457) Moderate: rh-php56-php security update
2016-03-15 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.6%

JSON
Related for PRION:CVE-2015-7803
hackerone1cve1ubuntucve1nessus23openvas18osv2securityvulns2f52debian2ubuntu1freebsd1slackware1amazon2suse3veracode11redhat1gentoo1rosalinux1