PHP 'process_nested_data()' Function Use After Free Remote Code Execution Vulnerability
BID:73431
Info
PHP 'process_nested_data()' Function Use After Free Remote Code Execution Vulnerability
| Bugtraq ID: | 73431 |
| Class: | Design Error |
| CVE: |
CVE-2015-2787 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 03 2015 12:00AM |
| Updated: | Jul 06 2016 02:22PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 HP Virtual Connect Enterprise Manager 6.2 HP Virtual Connect Enterprise Manager 6.1 HP Virtual Connect Enterprise Manager 6.0 HP Version Control Agent 2.1.5 HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 HP System Management Homepage 6.2.2 7 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.12 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP System Management Homepage 7.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2 HP System Management Homepage 6.0 HP Insight Orchestration 6.2 HP Insight Orchestration 6.1 HP Insight Orchestration 6.0 CentOS CentOS 6 Apple Mac Os X 10.7.4 Apple Mac Os X 10.7.3 Apple Mac Os X 10.7.1 |
| Not Vulnerable: | |
Discussion
PHP 'process_nested_data()' Function Use After Free Remote Code Execution Vulnerability
PHP is prone to a remote code-execution vulnerability.
Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of a web server. Failed attempts will likely result in denial-of-service conditions.
Following are vulnerable:
PHP 5.4.x prior to 5.4.39
PHP 5.5.x prior to 5.5.23
PHP 5.6.x prior to 5.6.7
PHP is prone to a remote code-execution vulnerability.
Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of a web server. Failed attempts will likely result in denial-of-service conditions.
Following are vulnerable:
PHP 5.4.x prior to 5.4.39
PHP 5.5.x prior to 5.5.23
PHP 5.6.x prior to 5.6.7
Exploit / POC
PHP 'process_nested_data()' Function Use After Free Remote Code Execution Vulnerability
Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of a web server. Failed attempts will likely result in denial-of-service conditions.
Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of a web server. Failed attempts will likely result in denial-of-service conditions.
Solution / Fix
PHP 'process_nested_data()' Function Use After Free Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
PHP 'process_nested_data()' Function Use After Free Remote Code Execution Vulnerability
References:
References:
- PHP 5 ChangeLog (PHP)
- PHP Homepage (PHP)
- Use After Free Vulnerability in unserialize() (PHP)
- APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 (Apple)
- HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabiliti (HP)
- HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and (Seclist)
- Oracle Linux Bulletin - January 2016 (Oracle)
- Security Advisory Important: php security and bug fix update (Redhat)
- Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Manag (IBM)
- Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (IBM)
- swg21972384 : IBM Tealeaf Customer Experience PCA Web UI PHP security issues (IBM)