ByteOS Network

NVD Vulnerability Details :

CVE-2015-6831

Deferred

Source-security@opentext.com

Published At-19 Jan, 2016 | 05:59

Updated At-12 Apr, 2025 | 10:46

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

The PHP Group

>>php>>Versions before 5.4.44(exclusive)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

The PHP Group

>>php>>Versions from 5.5.0(inclusive) to 5.5.28(exclusive)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

The PHP Group

>>php>>Versions from 5.6.0(inclusive) to 5.6.12(exclusive)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>7.0

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.debian.org/security/2015/dsa-3344	security@opentext.com	N/A
http://www.openwall.com/lists/oss-security/2015/08/19/3	security@opentext.com	N/A
http://www.php.net/ChangeLog-5.php	security@opentext.com	N/A
http://www.securityfocus.com/bid/76737	security@opentext.com	N/A
https://bugs.php.net/bug.php?id=70155	security@opentext.com	N/A
https://bugs.php.net/bug.php?id=70166	security@opentext.com	N/A
https://bugs.php.net/bug.php?id=70168	security@opentext.com	N/A
https://bugs.php.net/bug.php?id=70169	security@opentext.com	N/A
https://security.gentoo.org/glsa/201606-10	security@opentext.com	N/A
http://www.debian.org/security/2015/dsa-3344	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2015/08/19/3	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.php.net/ChangeLog-5.php	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/76737	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.php.net/bug.php?id=70155	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.php.net/bug.php?id=70166	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.php.net/bug.php?id=70168	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.php.net/bug.php?id=70169	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.gentoo.org/glsa/201606-10	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History