Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-7804
HistoryDec 11, 2015 - 12:00 p.m.

CVE-2015-7804

2015-12-1112:00:12
CWE-189
[email protected]
web.nvd.nist.gov
116
cve-2015-7804
php
security vulnerability
phar_parse_zipfile
denial of service

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.048 Low

EPSS

Percentile

92.8%

JSON

Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.

Affected configurations

NVD
Node
applemac_os_xRange≤10.11.1
Node
phpphpRange≤5.5.29
OR
phpphpMatch5.6.0
OR
phpphpMatch5.6.1
OR
phpphpMatch5.6.2
OR
phpphpMatch5.6.3
OR
phpphpMatch5.6.4
OR
phpphpMatch5.6.5
OR
phpphpMatch5.6.6
OR
phpphpMatch5.6.7
OR
phpphpMatch5.6.8
OR
phpphpMatch5.6.9
OR
phpphpMatch5.6.10
OR
phpphpMatch5.6.11
OR
phpphpMatch5.6.12
OR
phpphpMatch5.6.13
CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.11.1

Related

ubuntucve 1
nvd 1
prion 1
hackerone 1
cvelist 1
nessus 21
securityvulns 2
ubuntu 1
openvas 14
f5 2
debian 2
freebsd 1
osv 2
slackware 1
amazon 2
veracode 11
redhat 1
gentoo 1
cloudlinux 1
rosalinux 1
ubuntucve
ubuntucve
CVE-2015-7804
2015-10-12 00:00:00
nvd
nvd
CVE-2015-7804
2015-12-11 12:00:12
prion
prion
Null pointer dereference
2015-12-11 12:00:00
hackerone
hackerone
Internet Bug Bounty: Uninitialized pointer in phar_make_dirstream
2015-09-05 00:00:00
cvelist
cvelist
CVE-2015-7804
2015-12-11 11:00:00
nessus
nessus
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2786-1)
2015-10-29 00:00:00
PHP 5.6.x < 5.6.14 Multiple Vulnerabilities
2015-10-06 00:00:00
FreeBSD : php -- multiple vulnerabilities (c1da8b75-6aef-11e5-9909-002590263bf5)
2015-10-05 00:00:00
securityvulns
securityvulns
[USN-2786-1] PHP vulnerabilities
2015-11-02 00:00:00
PHP security vulnerabilities
2015-11-02 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2015-10-28 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3380-1)
2015-10-26 00:00:00
Ubuntu: Security Advisory (USN-2786-1)
2015-10-29 00:00:00
PHP Multiple Denial of Service Vulnerabilities - 01 (Dec 2015) - Linux
2015-12-15 00:00:00
f5
f5
K17503 : PHP vulnerabilities CVE-2015-7803 and CVE-2015-7804
2015-10-29 00:00:00
SOL17503 - PHP vulnerabilities CVE-2015-7803 and CVE-2015-7804
2015-10-29 00:00:00
debian
debian
[SECURITY] [DSA 3380-1] php5 security update
2015-10-27 18:43:43
[SECURITY] [DLA 341-1] php5 security update
2015-11-08 18:51:20
freebsd
freebsd
php -- multiple vulnerabilities
2015-10-01 00:00:00
osv
osv
php5 - security update
2015-10-27 00:00:00
php5 - security update
2015-11-08 00:00:00
slackware
slackware
[slackware-security] php
2016-02-04 00:07:13
amazon
amazon
Medium: php55
2015-10-20 14:52:00
Medium: php56
2015-10-20 14:50:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:27:42
Denial Of Service (DoS)
2019-05-02 05:27:42
Use After Free
2019-05-02 05:27:42
redhat
redhat
(RHSA-2016:0457) Moderate: rh-php56-php security update
2016-03-15 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.048 Low

EPSS

Percentile

92.8%

JSON
Related for CVE-2015-7804
ubuntucve1nvd1prion1hackerone1cvelist1nessus21securityvulns2ubuntu1openvas14f52debian2freebsd1osv2slackware1amazon2veracode11redhat1gentoo1cloudlinux1rosalinux1