Most recent entries from all

bdu:2016-00306

Withdrawn: BELL-CVE-2015-6831 — CVE-2015-6831 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2015-06226

EUVD-2026-94546

fkie_cve-2015-6831

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.

GHSA-44m9-gpqm-x8fj

gsd-2015-6831

RHSA-2016:0457 — Red Hat Security Advisory: rh-php56-php security update

php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()

SUSE-SU-2015:1633-1 — Security update for php5

Security update for php5

UBUNTU-CVE-2015-6831

Affected: Ubuntu:14.04:LTS: php5