Lucene search
Ubuntu.comUB:CVE-2015-3307HistoryJun 09, 2015 - 12:00 a.m.
CVE-2015-3307
2015-06-0900:00:00
ubuntu.com
ubuntu.com
14
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.3%
The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40,
5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to
cause a denial of service (heap metadata corruption) or possibly have
unspecified other impact via a crafted tar archive.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | The two first commits may have also been used to fix CVE-2015-2783 |
Related
hackerone
hackerone
Internet Bug Bounty: invalid pointer free() in phar_tar_process_metadata()
2015-04-15 00:00:00
Internet Bug Bounty: Buffer Over-read in unserialize when parsing Phar
2015-03-29 00:00:00
prion
prion
Heap overflow
2015-06-09 18:59:00
Design/Logic Flaw
2015-06-09 18:59:00
f5
f5
K07052904 : PHP vulnerability CVE-2015-3307
2019-02-11 00:00:00
K17200 : PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
SOL17200 - PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
cve
cve
CVE-2015-3307
2015-06-09 18:59:00
CVE-2015-2783
2015-06-09 18:59:00
veracode
veracode
Denial Of Service
2019-01-15 09:06:21
Improper Input Validation
2019-05-02 05:39:56
Heap-based Buffer Overflow
2019-05-02 05:39:55
ubuntucve
ubuntucve
CVE-2015-2783
2015-04-17 00:00:00
osv
osv
php5 - security update
2015-06-07 00:00:00
php5 - security update
2015-04-29 00:00:00
php5 - security update
2015-09-07 00:00:00
archlinux
archlinux
php: multiple issues
2015-04-17 00:00:00
suse
suse
Security update for php5 (important)
2015-05-12 17:05:25
Security update for php5 (important)
2015-05-13 15:07:04
Security update for php53 (important)
2016-06-21 13:08:17
securityvulns
securityvulns
[ MDVSA-2015:209 ] php
2015-05-05 00:00:00
PHP security vulnerabilities
2015-05-05 00:00:00
[SECURITY] [DSA 3280-1] php5 security update
2015-06-08 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2015-04-25 23:15:07
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2015:209)
2015-04-28 00:00:00
openSUSE Security Update : php5 (openSUSE-2015-352)
2015-05-13 00:00:00
Fedora 21 : php-5.6.8-1.fc21 (2015-6407)
2015-04-24 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.8-1.fc21
2015-04-23 16:11:13
[SECURITY] Fedora 22 Update: php-5.6.8-1.fc22
2015-04-22 22:52:07
[SECURITY] Fedora 20 Update: php-5.5.24-1.fc20
2015-04-27 08:39:40
openvas
openvas
Fedora Update for php FEDORA-2015-6407
2015-04-24 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2015:0855-1)
2015-06-09 00:00:00
Fedora Update for php FEDORA-2015-6195
2015-07-07 00:00:00
freebsd
freebsd
Several vulnerabilities found in PHP
2015-04-16 00:00:00
amazon
amazon
Important: php54
2015-04-17 12:04:00
ubuntu
ubuntu
PHP vulnerabilities
2015-04-20 00:00:00
redhat
redhat
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
debian
debian
[SECURITY] [DSA 3280-1] php5 security update
2015-06-07 17:06:52
[SECURITY] [DLA 212-1] php5 security update
2015-04-29 20:45:33
[SECURITY] [DLA 307-1] php5 security update
2015-09-07 20:21:46
oraclelinux
oraclelinux
php55-php security update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
ibm
ibm
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.3%
Related for UB:CVE-2015-3307