CVE

Id
81920  
CVE No.
CVE-2015-4643  
Status
Candidate  
Description
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.  
Phase
Assigned (20150618)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
735241 81920 CVE-2015-4643 MLIST:[oss-security] 20150618 Re: PHP 5.6.10 / 5.5.26 / 5.4.42 CVE request  View
735242 81920 CVE-2015-4643 URL:http://openwall.com/lists/oss-security/2015/06/18/6  View
735243 81920 CVE-2015-4643 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=0765623d6991b62ffcd93ddb6be8a5203a2fa7e2  View
735244 81920 CVE-2015-4643 CONFIRM:http://php.net/ChangeLog-5.php  View
735245 81920 CVE-2015-4643 CONFIRM:https://bugs.php.net/bug.php?id=69545  View
735246 81920 CVE-2015-4643 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
735247 81920 CVE-2015-4643 GENTOO:GLSA-201606-10  View
735248 81920 CVE-2015-4643 URL:https://security.gentoo.org/glsa/201606-10  View
735249 81920 CVE-2015-4643 REDHAT:RHSA-2015:1187  View
735250 81920 CVE-2015-4643 URL:http://rhn.redhat.com/errata/RHSA-2015-1187.html  View
735251 81920 CVE-2015-4643 REDHAT:RHSA-2015:1135  View
735252 81920 CVE-2015-4643 URL:http://rhn.redhat.com/errata/RHSA-2015-1135.html  View
735253 81920 CVE-2015-4643 REDHAT:RHSA-2015:1186  View
735254 81920 CVE-2015-4643 URL:http://rhn.redhat.com/errata/RHSA-2015-1186.html  View
735255 81920 CVE-2015-4643 BID:75291  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8036 JVNDB-2015-003356 libwmf の meta.h におけるサービス運用妨害 (DoS) の脆弱性 libwmf の meta.h には、サービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2015-4695 81920 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003356.html  View