PHP '/ext/opcache/zend_shared_alloc.c' Use After Free Denial of Service Vulnerability
BID:71929
Info
PHP '/ext/opcache/zend_shared_alloc.c' Use After Free Denial of Service Vulnerability
| Bugtraq ID: | 71929 |
| Class: | Design Error |
| CVE: |
CVE-2015-1351 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 08 2015 12:00AM |
| Updated: | Oct 26 2016 06:10AM |
| Credit: | Joshua Rogers |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Slackware Linux 14.1 Slackware Linux 14.0 Oracle Secure Backup 10.4 1 Oracle Secure Backup 10.4.0.4.0 Oracle Secure Backup 10.3.0.3 Oracle Secure Backup 10.3.0.2 Oracle Secure Backup 10.3.0.1.0 Oracle Secure Backup 10.2.0.3 Oracle Secure Backup 10.2.0.2 Oracle Secure Backup 10.1.0.3 Oracle Secure Backup 10.1.0.2 Oracle Secure Backup 10.1.0.1 Oracle Linux 7 Oracle Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Apple Mac Os X 10.10.5 Apple Mac OS X 10.10 Apple Mac OS X 10.9.5 Apple Mac OS X 10.9.1 Apple Mac OS X 10.8.5 Apple Mac OS X 10.8.4 Apple Mac OS X 10.8.2 Apple Mac OS X 10.8.1 Apple Mac OS X 10.8 Apple Mac OS X 10.7 Apple Mac OS X 10.9.4 Apple Mac OS X 10.9.3 Apple Mac OS X 10.9.2 Apple Mac OS X 10.9 Apple Mac OS X 10.8.3 Apple Mac OS X 10.7.5 Apple Mac OS X 10.7.4 Apple Mac OS X 10.7.3 Apple Mac OS X 10.7.1 Apple Mac OS X 10.6.8 Apple Mac Os X 10.10.4 Apple Mac Os X 10.10.3 Apple Mac OS X 10.10.2 Apple Mac OS X 10.10.1 |
| Not Vulnerable: |
Oracle Secure Backup 12.1.0.2.0 Apple Mac Os X 10.11 |
Discussion
PHP '/ext/opcache/zend_shared_alloc.c' Use After Free Denial of Service Vulnerability
PHP is prone to a denial-of-service vulnerability due to a user-after-free condition.
An attacker can exploit this issue to crash the affected application, denying service to legitimate users.
PHP is prone to a denial-of-service vulnerability due to a user-after-free condition.
An attacker can exploit this issue to crash the affected application, denying service to legitimate users.
Exploit / POC
PHP '/ext/opcache/zend_shared_alloc.c' Use After Free Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
PHP '/ext/opcache/zend_shared_alloc.c' Use After Free Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva apache-mod_php-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64php5_common5-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64zip-devel-0.10.1-2.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64zip2-0.10.1-2.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libzip-0.10.1-2.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-apc-3.1.15-1.17.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-apc-admin-3.1.15-1.17.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-bcmath-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-bz2-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-calendar-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cgi-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cli-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-ctype-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-curl-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-dba-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-devel-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-doc-5.5.23-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-dom-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-enchant-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-exif-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-fileinfo-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-filter-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-fpm-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-ftp-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-gd-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-gettext-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-gmp-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-hash-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-iconv-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-imap-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-ini-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-intl-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-json-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-ldap-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-mbstring-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-mcrypt-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-mssql-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-mysql-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-mysqli-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-mysqlnd-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-odbc-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-opcache-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-openssl-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pcntl-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pdo-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pdo_dblib-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pdo_mysql-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pdo_odbc-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pdo_pgsql-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pdo_sqlite-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pgsql-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-phar-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-posix-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-readline-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-recode-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-session-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-shmop-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-snmp-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-soap-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-sockets-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-sqlite3-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-sybase_ct-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-sysvmsg-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-sysvsem-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-sysvshm-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-tidy-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-tokenizer-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-wddx-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-xdebug-2.3.2-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-xml-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-xmlreader-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-xmlrpc-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-xmlwriter-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-xsl-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-zip-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-zlib-5.5.23-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
PHP '/ext/opcache/zend_shared_alloc.c' Use After Free Denial of Service Vulnerability
References:
References:
- CVE Request: PHP (Joshua Rogers)
- PHP Homepage (PHP)
- [slackware-security] php (SSA:2015-111-10) (Slackware)
- Bug #68677 use-after-free (PHP)
- Critical Patch Security Advisory - October 2016 (Oracle)
- Oracle Linux Bulletin - January 2016 (Oracle)