kritisch
CVE-2015-6835
php: use-after-free vulnerability in session deserializer
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel), Red Hat (niedrig), Amazon (niedrig).
Beschreibung
The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | php54, php54-bcmath, php54-cli und 90 weitere | 5.4.45-1.75.amzn1 und 2 weitere |
| debian 7 | php5 | 5.4.45-0+deb7u1 |
| debian 8 | php5 | 5.6.13+dfsg-0+deb8u1 |
| Red Hat | php, php-bcmath, php-cli und 25 weitere | kein Fix angegeben |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.20 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.3 |
Alle 127 Einträge aus 8 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | php54 | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-bcmath | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-cli | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-common | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-dba | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-debuginfo | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-devel | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-embedded | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-enchant | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-fpm | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-gd | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-imap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-intl | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-ldap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mbstring | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mcrypt | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mssql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mysql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mysqlnd | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-odbc | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pdo | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pgsql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-process | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pspell | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-recode | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-snmp | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-soap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-tidy | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-xml | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-xmlrpc | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php55 | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-bcmath | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-cli | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-common | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-dba | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-debuginfo | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-devel | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-embedded | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-enchant | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-fpm | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-gd | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-gmp | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-imap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-intl | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-ldap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mbstring | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mcrypt | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mssql | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mysqlnd | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-odbc | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-opcache | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pdo | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pgsql | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-process | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pspell | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-recode | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-snmp | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-soap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-tidy | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-xml | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-xmlrpc | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php56 | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-bcmath | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-cli | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-common | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-dba | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-dbg | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-debuginfo | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-devel | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-embedded | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-enchant | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-fpm | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-gd | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-gmp | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-imap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-intl | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-ldap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mbstring | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mcrypt | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mssql | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mysqlnd | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-odbc | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-opcache | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pdo | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pgsql | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-process | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pspell | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-recode | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-snmp | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-soap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-tidy | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-xml | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-xmlrpc | 5.6.14-1.119.amzn1 |
| debian 7 | php5 | 5.4.45-0+deb7u1 |
| debian 8 | php5 | 5.6.13+dfsg-0+deb8u1 |
| Red Hat | php | kein Fix angegeben |
| Red Hat | php-bcmath | kein Fix angegeben |
| Red Hat | php-cli | kein Fix angegeben |
| Red Hat | php-common | kein Fix angegeben |
| Red Hat | php-dba | kein Fix angegeben |
| Red Hat | php-devel | kein Fix angegeben |
| Red Hat | php-embedded | kein Fix angegeben |
| Red Hat | php-enchant | kein Fix angegeben |
| Red Hat | php-fpm | kein Fix angegeben |
| Red Hat | php-gd | kein Fix angegeben |
| Red Hat | php-imap | kein Fix angegeben |
| Red Hat | php-intl | kein Fix angegeben |
| Red Hat | php-ldap | kein Fix angegeben |
| Red Hat | php-mbstring | kein Fix angegeben |
| Red Hat | php-mysql | kein Fix angegeben |
| Red Hat | php-mysqlnd | kein Fix angegeben |
| Red Hat | php-odbc | kein Fix angegeben |
| Red Hat | php-pdo | kein Fix angegeben |
| Red Hat | php-pgsql | kein Fix angegeben |
| Red Hat | php-process | kein Fix angegeben |
| Red Hat | php-pspell | kein Fix angegeben |
| Red Hat | php-recode | kein Fix angegeben |
| Red Hat | php-snmp | kein Fix angegeben |
| Red Hat | php-soap | kein Fix angegeben |
| Red Hat | php-tidy | kein Fix angegeben |
| Red Hat | php-xml | kein Fix angegeben |
| Red Hat | php-xmlrpc | kein Fix angegeben |
| Red Hat | php-zts | kein Fix angegeben |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.20 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.3 |
Referenzen
- http://php.net/ChangeLog-5.php
- http://www.debian.org/security/2015/dsa-3358
- http://www.openwall.com/lists/oss-security/2015/09/07/5
- http://www.securityfocus.com/bid/76734
- http://www.securitytracker.com/id/1033548
- https://access.redhat.com/security/cve/CVE-2015-6835
- https://bugs.php.net/bug.php?id=70219
- https://nvd.nist.gov/vuln/detail/CVE-2015-6835