crítica
CVE-2015-4643
php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), Amazon (media), Oracle (media), Ubuntu (media).
Descripción
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | php54, php54-bcmath, php54-cli y 90 más | 5.4.42-1.71.amzn1 y 2 más |
| debian 7 | php5 | 5.4.44-0+deb7u1 |
| debian 8 | php5 | 5.6.12+dfsg-0+deb8u1 |
| Oracle Linux 6 | php54-php, php54-php-bcmath, php54-php-cli y 22 más | 5.4.40-3.el6 |
| Oracle Linux 7 | php54-php, php54-php-bcmath, php54-php-cli y 45 más | 5.4.40-3.el7 y 1 más |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.19 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.10 | php5 | 5.5.12+dfsg-2ubuntu4.6 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.2 |
Mostrar las 173 entradas de 10 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | php54 | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-bcmath | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-cli | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-common | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-dba | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-debuginfo | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-devel | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-embedded | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-enchant | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-fpm | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-gd | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-imap | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-intl | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-ldap | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-mbstring | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-mcrypt | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-mssql | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-mysql | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-mysqlnd | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-odbc | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-pdo | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-pgsql | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-process | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-pspell | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-recode | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-snmp | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-soap | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-tidy | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-xml | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php54-xmlrpc | 5.4.42-1.71.amzn1 |
| amazon linux 1 | php55 | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-bcmath | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-cli | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-common | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-dba | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-debuginfo | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-devel | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-embedded | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-enchant | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-fpm | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-gd | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-gmp | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-imap | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-intl | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-ldap | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-mbstring | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-mcrypt | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-mssql | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-mysqlnd | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-odbc | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-opcache | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-pdo | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-pgsql | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-process | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-pspell | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-recode | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-snmp | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-soap | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-tidy | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-xml | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php55-xmlrpc | 5.5.26-1.103.amzn1 |
| amazon linux 1 | php56 | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-bcmath | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-cli | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-common | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-dba | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-dbg | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-debuginfo | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-devel | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-embedded | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-enchant | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-fpm | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-gd | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-gmp | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-imap | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-intl | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-ldap | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-mbstring | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-mcrypt | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-mssql | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-mysqlnd | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-odbc | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-opcache | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-pdo | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-pgsql | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-process | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-pspell | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-recode | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-snmp | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-soap | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-tidy | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-xml | 5.6.10-1.115.amzn1 |
| amazon linux 1 | php56-xmlrpc | 5.6.10-1.115.amzn1 |
| debian 7 | php5 | 5.4.44-0+deb7u1 |
| debian 8 | php5 | 5.6.12+dfsg-0+deb8u1 |
| Oracle Linux 6 | php54-php | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-bcmath | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-cli | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-common | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-dba | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-devel | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-enchant | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-fpm | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-gd | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-imap | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-intl | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-ldap | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-mbstring | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-mysqlnd | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-odbc | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-pdo | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-pgsql | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-process | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-pspell | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-recode | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-snmp | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-soap | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-tidy | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-xml | 5.4.40-3.el6 |
| Oracle Linux 6 | php54-php-xmlrpc | 5.4.40-3.el6 |
| Oracle Linux 7 | php54-php | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-bcmath | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-cli | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-common | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-dba | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-devel | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-enchant | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-fpm | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-gd | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-intl | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-ldap | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-mbstring | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-mysqlnd | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-odbc | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-pdo | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-pgsql | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-process | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-pspell | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-recode | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-snmp | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-soap | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-xml | 5.4.40-3.el7 |
| Oracle Linux 7 | php54-php-xmlrpc | 5.4.40-3.el7 |
| Oracle Linux 7 | php55-php | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-bcmath | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-cli | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-common | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-dba | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-devel | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-enchant | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-fpm | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-gd | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-gmp | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-intl | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-ldap | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-mbstring | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-mysqlnd | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-odbc | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-opcache | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-pdo | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-pgsql | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-process | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-pspell | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-recode | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-snmp | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-soap | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-xml | 5.5.21-4.el7 |
| Oracle Linux 7 | php55-php-xmlrpc | 5.5.21-4.el7 |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.19 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.11 |
| ubuntu 14.10 | php5 | 5.5.12+dfsg-2ubuntu4.6 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.2 |
Referencias
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0765623d6991b62ffcd93ddb6be8a5203a2fa7e2
- http://openwall.com/lists/oss-security/2015/06/18/6
- http://php.net/ChangeLog-5.php
- http://rhn.redhat.com/errata/RHSA-2015-1135.html
- http://rhn.redhat.com/errata/RHSA-2015-1186.html
- http://rhn.redhat.com/errata/RHSA-2015-1187.html
- http://rhn.redhat.com/errata/RHSA-2015-1218.html
- http://www.debian.org/security/2015/dsa-3344
Las 20 referencias
- http://www.openwall.com/lists/oss-security/2015/06/18/3
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/75291
- http://www.securitytracker.com/id/1032709
- https://access.redhat.com/security/cve/CVE-2015-4643
- https://bugs.php.net/bug.php?id=69545
- https://linux.oracle.com/cve/CVE-2015-4643.html
- https://linux.oracle.com/errata/ELSA-2015-1219.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-4643
- https://security.gentoo.org/glsa/201606-10
- https://ubuntu.com/security/notices/USN-2658-1
- https://www.cve.org/CVERecord?id=CVE-2015-4643