46 matches found
Internet Bug Bounty: Use After Free in GC with Certain Destructors
The bug submitted at: https://bugs.php.net/bug.php?id=72530 The fix committed at: http://git.php.net/?p=php-src.git;a=commit;h=60a7e60b61b8e4a3d455974c83f76a26546ce117 Impact The bug can be abused for leaking arbitrary memory blocks or execute arbitrary code remotely via PHP’s object deserializin...
Vulnerability of PHP software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information
The vulnerability exists in the PHP SPL component due to an incorrect definition of what happens after data structures are deallocated. This allows malicious actors who operate remotely to execute arbitrary code using a specially crafted string, thereby triggering the use of hash tables’...
[SECURITY] Fedora 22 Update: libtalloc-2.1.5-2.fc22
A library that implements a hierarchical allocator with destructors...
[SECURITY] Fedora 23 Update: libtalloc-2.1.5-2.fc23
A library that implements a hierarchical allocator with destructors...
