kritisch
CVE-2015-6834
php: multiple unserialization use-after-free issues
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel), Red Hat (niedrig), Amazon (niedrig).
Beschreibung
Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | php54, php54-bcmath, php54-cli und 90 weitere | 5.4.45-1.75.amzn1 und 2 weitere |
| debian 7 | php5 | 5.4.45-0+deb7u1 |
| debian 8 | php5 | 5.6.13+dfsg-0+deb8u1 |
| Red Hat | php, php-bcmath, php-cli und 22 weitere | kein Fix angegeben |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.20 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.3 |
Alle 124 Einträge aus 8 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | php54 | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-bcmath | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-cli | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-common | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-dba | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-debuginfo | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-devel | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-embedded | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-enchant | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-fpm | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-gd | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-imap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-intl | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-ldap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mbstring | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mcrypt | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mssql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mysql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mysqlnd | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-odbc | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pdo | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pgsql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-process | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pspell | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-recode | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-snmp | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-soap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-tidy | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-xml | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-xmlrpc | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php55 | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-bcmath | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-cli | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-common | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-dba | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-debuginfo | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-devel | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-embedded | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-enchant | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-fpm | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-gd | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-gmp | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-imap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-intl | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-ldap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mbstring | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mcrypt | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mssql | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mysqlnd | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-odbc | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-opcache | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pdo | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pgsql | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-process | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pspell | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-recode | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-snmp | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-soap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-tidy | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-xml | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-xmlrpc | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php56 | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-bcmath | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-cli | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-common | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-dba | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-dbg | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-debuginfo | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-devel | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-embedded | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-enchant | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-fpm | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-gd | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-gmp | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-imap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-intl | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-ldap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mbstring | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mcrypt | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mssql | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mysqlnd | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-odbc | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-opcache | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pdo | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pgsql | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-process | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pspell | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-recode | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-snmp | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-soap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-tidy | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-xml | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-xmlrpc | 5.6.14-1.119.amzn1 |
| debian 7 | php5 | 5.4.45-0+deb7u1 |
| debian 8 | php5 | 5.6.13+dfsg-0+deb8u1 |
| Red Hat | php | kein Fix angegeben |
| Red Hat | php-bcmath | kein Fix angegeben |
| Red Hat | php-cli | kein Fix angegeben |
| Red Hat | php-common | kein Fix angegeben |
| Red Hat | php-dba | kein Fix angegeben |
| Red Hat | php-devel | kein Fix angegeben |
| Red Hat | php-embedded | kein Fix angegeben |
| Red Hat | php-enchant | kein Fix angegeben |
| Red Hat | php-fpm | kein Fix angegeben |
| Red Hat | php-gd | kein Fix angegeben |
| Red Hat | php-intl | kein Fix angegeben |
| Red Hat | php-ldap | kein Fix angegeben |
| Red Hat | php-mbstring | kein Fix angegeben |
| Red Hat | php-mysql | kein Fix angegeben |
| Red Hat | php-mysqlnd | kein Fix angegeben |
| Red Hat | php-odbc | kein Fix angegeben |
| Red Hat | php-pdo | kein Fix angegeben |
| Red Hat | php-pgsql | kein Fix angegeben |
| Red Hat | php-process | kein Fix angegeben |
| Red Hat | php-pspell | kein Fix angegeben |
| Red Hat | php-recode | kein Fix angegeben |
| Red Hat | php-snmp | kein Fix angegeben |
| Red Hat | php-soap | kein Fix angegeben |
| Red Hat | php-xml | kein Fix angegeben |
| Red Hat | php-xmlrpc | kein Fix angegeben |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.20 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.3 |
Referenzen
- http://php.net/ChangeLog-5.php
- http://www.debian.org/security/2015/dsa-3358
- http://www.openwall.com/lists/oss-security/2015/09/07/5
- http://www.securityfocus.com/bid/76649
- http://www.securitytracker.com/id/1033548
- https://access.redhat.com/security/cve/CVE-2015-6834
- https://bugs.php.net/bug.php?id=70172
- https://bugs.php.net/bug.php?id=70365