CVE

Id
82438  
CVE No.
CVE-2015-5161  
Status
Candidate  
Description
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.  
Phase
Assigned (20150701)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
738502 82438 CVE-2015-5161 EXPLOIT-DB:37765  View
738503 82438 CVE-2015-5161 URL:https://www.exploit-db.com/exploits/37765/  View
738504 82438 CVE-2015-5161 FULLDISC:20150813 Zend Framework <= 2.4.2 XML eXternal Entity Injection (XXE) on PHP FPM  View
738505 82438 CVE-2015-5161 URL:http://seclists.org/fulldisclosure/2015/Aug/46  View
738506 82438 CVE-2015-5161 MISC:http://legalhackers.com/advisories/zend-framework-XXE-vuln.txt  View
738507 82438 CVE-2015-5161 MISC:http://packetstormsecurity.com/files/133068/Zend-Framework-2.4.2-1.12.13-XXE-Injection.html  View
738508 82438 CVE-2015-5161 CONFIRM:http://framework.zend.com/security/advisory/ZF2015-06  View
738509 82438 CVE-2015-5161 DEBIAN:DSA-3340  View
738510 82438 CVE-2015-5161 URL:http://www.debian.org/security/2015/dsa-3340  View
738511 82438 CVE-2015-5161 FEDORA:FEDORA-2015-13314  View
738512 82438 CVE-2015-5161 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164409.html  View
738513 82438 CVE-2015-5161 FEDORA:FEDORA-2015-13488  View
738514 82438 CVE-2015-5161 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165173.html  View
738515 82438 CVE-2015-5161 FEDORA:FEDORA-2015-13529  View
738516 82438 CVE-2015-5161 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165147.html  View
738517 82438 CVE-2015-5161 BID:76177  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10562 JVNDB-2015-005882 LibreOffice および Apache OpenOffice における整数オーバーフローの脆弱性 LibreOffice および Apache OpenOffice には、整数オーバーフローの脆弱性が存在します。 CVE-2015-5213 82438 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005882.html  View