Lucene search
LibnexH1:73238HistoryMar 29, 2015 - 12:00 a.m.
Internet Bug Bounty: Buffer Over-read in unserialize when parsing Phar
2015-03-2900:00:00
libnex
hackerone.com
$1000
33
0.054 Low
EPSS
Percentile
93.2%
https://bugs.php.net/bug.php?id=69324
ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.
Related
f5
f5
SOL17200 - PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
K17200 : PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
veracode
veracode
Denial Of Service
2019-01-15 09:06:21
Arbitrary File Write
2019-05-02 05:39:55
Improper Input Validation
2019-05-02 05:39:56
nvd
nvd
CVE-2015-2783
2015-06-09 18:59:00
cvelist
cvelist
CVE-2015-2783
2015-06-09 18:00:00
cve
cve
CVE-2015-2783
2015-06-09 18:59:00
prion
prion
Design/Logic Flaw
2015-06-09 18:59:00
ubuntucve
ubuntucve
CVE-2015-2783
2015-04-17 00:00:00
CVE-2015-3307
2015-06-09 00:00:00
suse
suse
Security update for php5 (important)
2015-05-12 17:05:25
Security update for php5 (important)
2015-05-13 15:07:04
Security update for php53 (important)
2016-06-21 13:08:17
securityvulns
securityvulns
[ MDVSA-2015:209 ] php
2015-05-05 00:00:00
PHP security vulnerabilities
2015-05-05 00:00:00
[SECURITY] [DSA 3280-1] php5 security update
2015-06-08 00:00:00
archlinux
archlinux
php: multiple issues
2015-04-17 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2015-04-25 23:15:07
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2015:209)
2015-04-28 00:00:00
Fedora 21 : php-5.6.8-1.fc21 (2015-6407)
2015-04-24 00:00:00
openSUSE Security Update : php5 (openSUSE-2015-352)
2015-05-13 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0169)
2022-01-28 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2015:0855-1)
2015-06-09 00:00:00
Fedora Update for php FEDORA-2015-6407
2015-04-24 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.8-1.fc21
2015-04-23 16:11:13
[SECURITY] Fedora 22 Update: php-5.6.8-1.fc22
2015-04-22 22:52:07
[SECURITY] Fedora 20 Update: php-5.5.24-1.fc20
2015-04-27 08:39:40
freebsd
freebsd
Several vulnerabilities found in PHP
2015-04-16 00:00:00
amazon
amazon
Important: php54
2015-04-17 12:04:00
ubuntu
ubuntu
PHP vulnerabilities
2015-04-20 00:00:00
debian
debian
[SECURITY] [DSA 3280-1] php5 security update
2015-06-07 17:06:52
[SECURITY] [DLA 212-1] php5 security update
2015-04-29 20:45:33
osv
osv
php5 - security update
2015-06-07 00:00:00
php5 - security update
2015-04-29 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
ibm
ibm
redhat
redhat
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
oraclelinux
oraclelinux
php55-php security update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45