crítica
CVE-2015-6835
php: use-after-free vulnerability in session deserializer
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media), Red Hat (baja), Amazon (baja).
Descripción
The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | php54, php54-bcmath, php54-cli y 90 más | 5.4.45-1.75.amzn1 y 2 más |
| debian 7 | php5 | 5.4.45-0+deb7u1 |
| debian 8 | php5 | 5.6.13+dfsg-0+deb8u1 |
| Red Hat | php, php-bcmath, php-cli y 25 más | sin corrección indicada |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.20 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.3 |
Mostrar las 127 entradas de 8 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | php54 | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-bcmath | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-cli | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-common | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-dba | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-debuginfo | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-devel | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-embedded | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-enchant | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-fpm | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-gd | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-imap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-intl | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-ldap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mbstring | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mcrypt | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mssql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mysql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-mysqlnd | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-odbc | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pdo | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pgsql | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-process | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-pspell | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-recode | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-snmp | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-soap | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-tidy | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-xml | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php54-xmlrpc | 5.4.45-1.75.amzn1 |
| amazon linux 1 | php55 | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-bcmath | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-cli | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-common | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-dba | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-debuginfo | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-devel | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-embedded | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-enchant | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-fpm | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-gd | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-gmp | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-imap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-intl | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-ldap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mbstring | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mcrypt | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mssql | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-mysqlnd | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-odbc | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-opcache | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pdo | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pgsql | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-process | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-pspell | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-recode | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-snmp | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-soap | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-tidy | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-xml | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php55-xmlrpc | 5.5.30-1.110.amzn1 |
| amazon linux 1 | php56 | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-bcmath | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-cli | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-common | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-dba | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-dbg | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-debuginfo | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-devel | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-embedded | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-enchant | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-fpm | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-gd | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-gmp | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-imap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-intl | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-ldap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mbstring | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mcrypt | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mssql | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-mysqlnd | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-odbc | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-opcache | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pdo | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pgsql | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-process | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-pspell | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-recode | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-snmp | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-soap | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-tidy | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-xml | 5.6.14-1.119.amzn1 |
| amazon linux 1 | php56-xmlrpc | 5.6.14-1.119.amzn1 |
| debian 7 | php5 | 5.4.45-0+deb7u1 |
| debian 8 | php5 | 5.6.13+dfsg-0+deb8u1 |
| Red Hat | php | sin corrección indicada |
| Red Hat | php-bcmath | sin corrección indicada |
| Red Hat | php-cli | sin corrección indicada |
| Red Hat | php-common | sin corrección indicada |
| Red Hat | php-dba | sin corrección indicada |
| Red Hat | php-devel | sin corrección indicada |
| Red Hat | php-embedded | sin corrección indicada |
| Red Hat | php-enchant | sin corrección indicada |
| Red Hat | php-fpm | sin corrección indicada |
| Red Hat | php-gd | sin corrección indicada |
| Red Hat | php-imap | sin corrección indicada |
| Red Hat | php-intl | sin corrección indicada |
| Red Hat | php-ldap | sin corrección indicada |
| Red Hat | php-mbstring | sin corrección indicada |
| Red Hat | php-mysql | sin corrección indicada |
| Red Hat | php-mysqlnd | sin corrección indicada |
| Red Hat | php-odbc | sin corrección indicada |
| Red Hat | php-pdo | sin corrección indicada |
| Red Hat | php-pgsql | sin corrección indicada |
| Red Hat | php-process | sin corrección indicada |
| Red Hat | php-pspell | sin corrección indicada |
| Red Hat | php-recode | sin corrección indicada |
| Red Hat | php-snmp | sin corrección indicada |
| Red Hat | php-soap | sin corrección indicada |
| Red Hat | php-tidy | sin corrección indicada |
| Red Hat | php-xml | sin corrección indicada |
| Red Hat | php-xmlrpc | sin corrección indicada |
| Red Hat | php-zts | sin corrección indicada |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.20 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.13 |
| ubuntu 15.04 | php5 | 5.6.4+dfsg-4ubuntu6.3 |
Referencias
- http://php.net/ChangeLog-5.php
- http://www.debian.org/security/2015/dsa-3358
- http://www.openwall.com/lists/oss-security/2015/09/07/5
- http://www.securityfocus.com/bid/76734
- http://www.securitytracker.com/id/1033548
- https://access.redhat.com/security/cve/CVE-2015-6835
- https://bugs.php.net/bug.php?id=70219
- https://nvd.nist.gov/vuln/detail/CVE-2015-6835