Lucene search
F5F5:K07052904HistoryFeb 11, 2019 - 12:00 a.m.
K07052904 : PHP vulnerability CVE-2015-3307
2019-02-1100:00:00
my.f5.com
23
Security Advisory Description
The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive. (CVE-2015-3307)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
cvelist
cvelist
CVE-2015-3307
2015-06-09 18:00:00
nvd
nvd
CVE-2015-3307
2015-06-09 18:59:01
hackerone
hackerone
Internet Bug Bounty: invalid pointer free() in phar_tar_process_metadata()
2015-04-15 00:00:00
prion
prion
Heap overflow
2015-06-09 18:59:00
cve
cve
CVE-2015-3307
2015-06-09 18:59:01
ubuntucve
ubuntucve
CVE-2015-3307
2015-06-09 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3280-1)
2015-06-06 00:00:00
PHP Multiple Vulnerabilities - 03 (Jun 2015) - Windows
2015-06-17 00:00:00
PHP Multiple Vulnerabilities - 03 (Jun 2015) - Linux
2015-06-17 00:00:00
osv
osv
php5 - security update
2015-06-07 00:00:00
php5 - security update
2015-09-07 00:00:00
nessus
nessus
RHEL 5 : php53 (Unpatched Vulnerability)
2024-06-03 00:00:00
PHP 5.4.x < 5.4.40 / 5.5.x < 5.5.24 / 5.6.x < 5.6.8 Multiple Vulnerabilities
2015-06-18 00:00:00
EulerOS Virtualization 3.0.1.0 : php (EulerOS-SA-2019-1545)
2019-05-14 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:39:55
Improper Input Validation
2019-05-02 05:39:55
Arbitrary File Write
2019-05-02 05:39:55
redhat
redhat
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
debian
debian
[SECURITY] [DLA 307-1] php5 security update
2015-09-07 20:21:46
oraclelinux
oraclelinux
php55-php security update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
securityvulns
securityvulns
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
2015-08-17 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45