Published: 30/03/2015 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP up to and including 5.6.7 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle secure backup
apple mac os x
php php
oracle solaris 11.2
oracle linux 6
oracle linux 7

Several security issues were fixed in PHP ...

Debian Bug report logs - #777033 php5: CVE-2015-1351 Package: php5; Maintainer for php5 is Debian PHP Maintainers <pkg-php-maint@listsaliothdebianorg>; Source for php5 is src:php5 (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Wed, 4 Feb 2015 08:51:01 UTC Severity: important Tags: s ...

Debian Bug report logs - #777036 php5: CVE-2015-1352 Package: php5; Maintainer for php5 is Debian PHP Maintainers <pkg-php-maint@listsaliothdebianorg>; Source for php5 is src:php5 (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Wed, 4 Feb 2015 08:51:01 UTC Severity: important Tags: s ...

A use-after-free flaw was found in PHP's OPcache extension This flaw could possibly lead to a disclosure of portion of server memory (CVE-2015-1351) A NULL pointer dereference flaw was found in PHP's pgsql extension A specially crafted table name passed to function as pg_insert() or pg_select() could cause a PHP application to crash (CVE-2015-1 ...

A use-after-free flaw was found in PHP's OPcache extension This flaw could possibly lead to a disclosure of a portion of the server memory ...

CWE-416 https://bugs.php.net/bug.php?id=68677 http://openwall.com/lists/oss-security/2015/01/24/9 http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 https://support.apple.com/HT205267 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html http://www.securityfocus.com/bid/71929 https://security.gentoo.org/glsa/201606-10 http://rhn.redhat.com/errata/RHSA-2015-1066.html http://rhn.redhat.com/errata/RHSA-2015-1053.html http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115 https://usn.ubuntu.com/2501-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-1351

CVE-2015-1351

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect