NVD

Id
27653  
Name
CVE-2015-6831  
Description
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-01-19  
Modified Date
2016-11-29  
Seq
2015-6831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
145093 27653 CVE-2015-6831 [oss-security] 20150819 CVE Request: more php unserializing issues  View
145094 27653 CVE-2015-6831 http://www.php.net/ChangeLog-5.php  View
145095 27653 CVE-2015-6831 76737  View
145096 27653 CVE-2015-6831 https://bugs.php.net/bug.php?id=70155  View
145097 27653 CVE-2015-6831 https://bugs.php.net/bug.php?id=70166  View
145098 27653 CVE-2015-6831 https://bugs.php.net/bug.php?id=70168  View
145099 27653 CVE-2015-6831 https://bugs.php.net/bug.php?id=70169  View
145100 27653 CVE-2015-6831 GLSA-201606-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11518 JVNDB-2015-006838 PHP の SPL における任意のコードを実行される脆弱性 PHP の SPL には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-6831 84056 CVE-2015-6831 27653 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006838.html 2015-08-06 2016-01-26 View