Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service (segmentation fault) via recursive method calls.
References
| Link | Resource |
|---|---|
| http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4d2278143a08b7522de9471d0f014d7357c28fea | |
| http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html | Mailing List Third Party Advisory |
| http://php.net/ChangeLog-5.php | Vendor Advisory |
| http://rhn.redhat.com/errata/RHSA-2016-2750.html | Third Party Advisory |
| https://bugs.php.net/bug.php?id=69793 | Exploit Vendor Advisory |
Configurations
History
05 Nov 2022, 02:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) http://php.net/ChangeLog-5.php - Vendor Advisory | |
| References | (CONFIRM) http://git.php.net/?p=php-src.git;a=commit;h=4d2278143a08b7522de9471d0f014d7357c28fea - Patch, Vendor Advisory | |
| References | (REDHAT) http://rhn.redhat.com/errata/RHSA-2016-2750.html - Third Party Advisory | |
| References | (CONFIRM) https://bugs.php.net/bug.php?id=69793 - Exploit, Vendor Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.16:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.11:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.24:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.25:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.12:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.26:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.8:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.27:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.15:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.17:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.9:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:* |
Information
Published : 2016-05-16 10:59
Updated : 2024-02-04 18:53
NVD link : CVE-2015-8873
Mitre link : CVE-2015-8873
CVE.ORG link : CVE-2015-8873
JSON object : View
Products Affected
php
- php
opensuse
- leap
CWE
CWE-20
Improper Input Validation