kritisch
CVE-2015-4600
php: type confusion issue in unserialize() with various SOAP methods
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat4.3AV:N/AC:M/Au:N/C:P/I:N/A:N
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (mittel), Oracle (mittel), Ubuntu (mittel).
Beschreibung
The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 7 | php5 | 5.4.41-0+deb7u1 |
| debian 8 | php5 | 5.6.9+dfsg-0+deb8u1 |
| Oracle Linux 6 | php, php-bcmath, php-cli und 83 weitere | 5.3.3-46.el6_6 und 4 weitere |
| Oracle Linux 7 | php, php-bcmath, php-cli und 77 weitere | 5.4.16-36.el7_1 und 4 weitere |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.19 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.10 | php5 | 5.5.12+dfsg-2ubuntu4.6 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.2 |
Alle 173 Einträge aus 9 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 7 | php5 | 5.4.41-0+deb7u1 |
| debian 8 | php5 | 5.6.9+dfsg-0+deb8u1 |
| Oracle Linux 6 | php | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-bcmath | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-cli | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-common | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-dba | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-devel | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-embedded | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-enchant | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-fpm | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-gd | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-imap | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-intl | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-ldap | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-mbstring | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-mysql | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-odbc | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-pdo | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-pgsql | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-process | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-pspell | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-recode | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-snmp | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-soap | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-tidy | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-xml | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-xmlrpc | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php-zts | 5.3.3-46.el6_6 |
| Oracle Linux 6 | php54 | 2.0-1.el6 |
| Oracle Linux 6 | php54-php | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-bcmath | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-cli | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-common | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-dba | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-devel | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-enchant | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-fpm | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-gd | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-imap | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-intl | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-ldap | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-mbstring | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-mysqlnd | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-odbc | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-pdo | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-pecl-zendopcache | 7.0.4-3.el6 |
| Oracle Linux 6 | php54-php-pgsql | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-process | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-pspell | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-recode | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-snmp | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-soap | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-tidy | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-xml | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-php-xmlrpc | 5.4.40-1.el6 |
| Oracle Linux 6 | php54-runtime | 2.0-1.el6 |
| Oracle Linux 6 | php54-scldevel | 2.0-1.el6 |
| Oracle Linux 6 | php55 | 2.0-1.el6 |
| Oracle Linux 6 | php55-php | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-bcmath | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-cli | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-common | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-dba | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-devel | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-enchant | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-fpm | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-gd | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-gmp | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-imap | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-intl | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-ldap | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-mbstring | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-mysqlnd | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-odbc | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-opcache | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-pdo | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-pgsql | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-process | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-pspell | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-recode | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-snmp | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-soap | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-tidy | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-xml | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-php-xmlrpc | 5.5.21-2.0.1.el6 |
| Oracle Linux 6 | php55-runtime | 2.0-1.el6 |
| Oracle Linux 6 | php55-scldevel | 2.0-1.el6 |
| Oracle Linux 7 | php | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-bcmath | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-cli | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-common | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-dba | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-devel | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-embedded | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-enchant | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-fpm | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-gd | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-intl | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-ldap | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-mbstring | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-mysql | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-mysqlnd | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-odbc | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-pdo | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-pgsql | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-process | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-pspell | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-recode | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-snmp | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-soap | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-xml | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php-xmlrpc | 5.4.16-36.el7_1 |
| Oracle Linux 7 | php54 | 2.0-1.el7 |
| Oracle Linux 7 | php54-php | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-bcmath | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-cli | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-common | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-dba | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-devel | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-enchant | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-fpm | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-gd | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-intl | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-ldap | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-mbstring | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-mysqlnd | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-odbc | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-pdo | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-pecl-zendopcache | 7.0.4-3.el7 |
| Oracle Linux 7 | php54-php-pgsql | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-process | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-pspell | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-recode | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-snmp | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-soap | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-xml | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-php-xmlrpc | 5.4.40-1.el7 |
| Oracle Linux 7 | php54-runtime | 2.0-1.el7 |
| Oracle Linux 7 | php54-scldevel | 2.0-1.el7 |
| Oracle Linux 7 | php55 | 2.0-1.el7 |
| Oracle Linux 7 | php55-php | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-bcmath | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-cli | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-common | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-dba | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-devel | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-enchant | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-fpm | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-gd | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-gmp | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-intl | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-ldap | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-mbstring | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-mysqlnd | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-odbc | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-opcache | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-pdo | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-pgsql | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-process | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-pspell | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-recode | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-snmp | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-soap | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-xml | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-php-xmlrpc | 5.5.21-2.el7 |
| Oracle Linux 7 | php55-runtime | 2.0-1.el7 |
| Oracle Linux 7 | php55-scldevel | 2.0-1.el7 |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.19 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.10 | php5 | 5.5.12+dfsg-2ubuntu4.6 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.2 |
Referenzen
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0c136a2abd49298b66acb0cad504f0f972f5bfe8
- http://php.net/ChangeLog-5.php
- http://rhn.redhat.com/errata/RHSA-2015-1135.html
- http://rhn.redhat.com/errata/RHSA-2015-1218.html
- http://seclists.org/oss-sec/2015/q2/727
- http://www.openwall.com/lists/oss-security/2015/06/16/12
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/74413
Alle 17 Referenzen
- http://www.securitytracker.com/id/1032709
- https://access.redhat.com/security/cve/CVE-2015-4600
- https://bugs.php.net/bug.php?id=69152
- https://linux.oracle.com/cve/CVE-2015-4600.html
- https://linux.oracle.com/errata/ELSA-2015-1218.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-4600
- https://rhn.redhat.com/errata/RHSA-2015-1135.html
- https://ubuntu.com/security/notices/USN-2658-1
- https://www.cve.org/CVERecord?id=CVE-2015-4600