9.8
CVSSv3

CVE-2015-8876

Published: 22/05/2016 Updated: 14/02/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Zend/zend_exceptions.c in PHP prior to 5.4.44, 5.5.x prior to 5.5.28, and 5.6.x prior to 5.6.12 does not validate certain Exception objects, which allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data.

Vulnerable Product Search on Vulmon Subscribe to Product

php php

Vendor Advisories

Synopsis Moderate: rh-php56 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php56, rh-php56-php, and rh-php56-php-pear is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Mo ...
Several security issues were fixed in PHP ...
Zend/zend_exceptionsc in PHP before 5444, 55x before 5528, and 56x before 5612 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data ...