CVE-2015-6834
Summary
| CVE | CVE-2015-6834 |
|---|---|
| State | PUBLISHED |
| Assigner | microfocus |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-05-16 10:59:18 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization. |
Risk And Classification
Primary CVSS: v3.0 9.8 CRITICAL from [email protected]
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem Types: NVD-CWE-Other | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 9.8 | CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | [email protected] | Primary | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Php | Php | 5.5.0 | All | All | All |
| Application | Php | Php | 5.5.1 | All | All | All |
| Application | Php | Php | 5.5.10 | All | All | All |
| Application | Php | Php | 5.5.11 | All | All | All |
| Application | Php | Php | 5.5.12 | All | All | All |
| Application | Php | Php | 5.5.13 | All | All | All |
| Application | Php | Php | 5.5.14 | All | All | All |
| Application | Php | Php | 5.5.15 | All | All | All |
| Application | Php | Php | 5.5.16 | All | All | All |
| Application | Php | Php | 5.5.17 | All | All | All |
| Application | Php | Php | 5.5.18 | All | All | All |
| Application | Php | Php | 5.5.19 | All | All | All |
| Application | Php | Php | 5.5.2 | All | All | All |
| Application | Php | Php | 5.5.20 | All | All | All |
| Application | Php | Php | 5.5.21 | All | All | All |
| Application | Php | Php | 5.5.22 | All | All | All |
| Application | Php | Php | 5.5.23 | All | All | All |
| Application | Php | Php | 5.5.24 | All | All | All |
| Application | Php | Php | 5.5.25 | All | All | All |
| Application | Php | Php | 5.5.26 | All | All | All |
| Application | Php | Php | 5.5.27 | All | All | All |
| Application | Php | Php | 5.5.28 | All | All | All |
| Application | Php | Php | 5.5.3 | All | All | All |
| Application | Php | Php | 5.5.4 | All | All | All |
| Application | Php | Php | 5.5.5 | All | All | All |
| Application | Php | Php | 5.5.6 | All | All | All |
| Application | Php | Php | 5.5.7 | All | All | All |
| Application | Php | Php | 5.5.8 | All | All | All |
| Application | Php | Php | 5.5.9 | All | All | All |
| Application | Php | Php | 5.6.0 | All | All | All |
| Application | Php | Php | 5.6.1 | All | All | All |
| Application | Php | Php | 5.6.10 | All | All | All |
| Application | Php | Php | 5.6.11 | All | All | All |
| Application | Php | Php | 5.6.12 | All | All | All |
| Application | Php | Php | 5.6.2 | All | All | All |
| Application | Php | Php | 5.6.3 | All | All | All |
| Application | Php | Php | 5.6.4 | All | All | All |
| Application | Php | Php | 5.6.5 | All | All | All |
| Application | Php | Php | 5.6.6 | All | All | All |
| Application | Php | Php | 5.6.7 | All | All | All |
| Application | Php | Php | 5.6.8 | All | All | All |
| Application | Php | Php | 5.6.9 | All | All | All |
| Application | Php | Php | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| PHP: Multiple vulnerabilities (GLSA 201606-10) — Gentoo security | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| PHP :: Sec Bug #70366 :: yet another use-after-free vulnerability in unserialize() with SplDoublyLinkedL | af854a3a-2127-422b-91ae-364da2661108 | bugs.php.net | |
| PHP Multiple Bugs Let Remote Users Obtain Potentially Sensitive Information, View Files, and Execute Arbitrary Code - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Debian -- Security Information -- DSA-3358-1 php5 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| PHP CVE-2015-6834 Multiple Remote Code Execution Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| PHP :: Sec Bug #70172 :: Use After Free Vulnerability in unserialize() | af854a3a-2127-422b-91ae-364da2661108 | bugs.php.net | |
| PHP :: Sec Bug #70365 :: yet another use-after-free vulnerability in unserialize() with SplObjectStorage | af854a3a-2127-422b-91ae-364da2661108 | bugs.php.net | |
| PHP: PHP 5 ChangeLog | af854a3a-2127-422b-91ae-364da2661108 | php.net | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.