Lucene search
PRIOn knowledge basePRION:CVE-2015-5589HistoryMay 16, 2016 - 10:59 a.m.
Design/Logic Flaw
2016-05-1610:59:00
PRIOn knowledge base
www.prio-n.com
15
The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php | eq | 5.6.1 | |
| php | eq | 5.6.0 alpha5 | |
| php | eq | 5.6.5 | |
| php | eq | 5.6.0 beta2 | |
| php | eq | 5.6.0 beta1 | |
| php | eq | 5.6.4 | |
| php | eq | 5.6.6 | |
| php | eq | 5.6.0 alpha3 | |
| php | eq | 5.6.2 | |
| php | eq | 5.6.10 |
Related
ubuntucve
ubuntucve
CVE-2015-5589
2015-07-20 00:00:00
nessus
nessus
PHP 5.4.x < 5.4.43 / 5.5.x < 5.5.27 / 5.6.x < 5.6.11 Multiple Vulnerabilities (BACKRONYM)
2015-10-07 00:00:00
SUSE SLES12 Security Update : php5 (SUSE-SU-2015:1425-1)
2019-01-02 00:00:00
openSUSE Security Update : php5 (openSUSE-2015-536)
2015-08-07 00:00:00
cve
cve
CVE-2015-5589
2016-05-16 10:59:17
nvd
nvd
CVE-2015-5589
2016-05-16 10:59:17
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:10:38
Use After Free
2019-05-02 05:27:42
Denial Of Service (DoS)
2019-05-02 05:27:42
cvelist
cvelist
CVE-2015-5589
2016-05-16 10:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0276)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1466-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1425-1)
2021-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.11-1.fc21
2015-07-29 01:58:13
freebsd
freebsd
php-phar -- multiple vulnerabilities
2015-06-24 00:00:00
mageia
mageia
Updated php package fixes security vulnerabilities
2015-07-23 12:39:14
securityvulns
securityvulns
PHP security vulnerabilities
2015-08-31 00:00:00
[SECURITY] [DSA 3344-1] php5 security update
2015-08-31 00:00:00
debian
debian
[SECURITY] [DSA 3344-1] php5 security update
2015-08-27 15:00:09
[SECURITY] [DSA 3344-1] php5 security update
2015-08-27 15:00:09
[SECURITY] [DLA 307-1] php5 security update
2015-09-07 20:21:46
amazon
amazon
osv
osv
php5 - security update
2015-08-27 00:00:00
php5 - security update
2015-09-07 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2015-09-30 00:00:00
redhat
redhat
(RHSA-2016:0457) Moderate: rh-php56-php security update
2016-03-15 00:00:00
suse
suse
Security update for php53 (important)
2016-06-21 13:08:17
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45