CVE-2015-2301

2015-03-1600:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.5%

JSON

Use-after-free vulnerability in the phar_rename_archive function in
phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote
attackers to cause a denial of service or possibly have unspecified other
impact via vectors that trigger an attempted renaming of a Phar archive to
the name of an existing file.

Bugs

<https://bugs.php.net/bug.php?id=68901>

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchphp5< 5.3.2-1ubuntu4.29UNKNOWN
ubuntu12.04noarchphp5< 5.3.10-1ubuntu3.17UNKNOWN
ubuntu14.04noarchphp5< 5.5.9+dfsg-1ubuntu4.7UNKNOWN
ubuntu14.10noarchphp5< 5.5.12+dfsg-2ubuntu4.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	php5	< 5.3.2-1ubuntu4.29	UNKNOWN
ubuntu	12.04	noarch	php5	< 5.3.10-1ubuntu3.17	UNKNOWN
ubuntu	14.04	noarch	php5	< 5.5.9+dfsg-1ubuntu4.7	UNKNOWN
ubuntu	14.10	noarch	php5	< 5.5.12+dfsg-2ubuntu4.3	UNKNOWN