NVD

Id
27656  
Name
CVE-2015-6834  
Description
Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-05-16  
Modified Date
2016-11-29  
Seq
2015-6834  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
145108 27656 CVE-2015-6834 http://php.net/ChangeLog-5.php  View
145109 27656 CVE-2015-6834 76649  View
145110 27656 CVE-2015-6834 https://bugs.php.net/bug.php?id=70172  View
145111 27656 CVE-2015-6834 https://bugs.php.net/bug.php?id=70365  View
145112 27656 CVE-2015-6834 https://bugs.php.net/bug.php?id=70366  View
145113 27656 CVE-2015-6834 GLSA-201606-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11837 JVNDB-2015-007157 PHP における任意のコードを実行される脆弱性 PHP には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-6834 84059 CVE-2015-6834 27656 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007157.html 2015-09-03 2016-05-19 View