PHP CVE-2015-3329 Buffer Overflow Vulnerability

Bugtraq ID:	74240
Class:	Boundary Condition Error
CVE:	CVE-2015-3329
Remote:	Yes
Local:	No
Published:	Apr 20 2015 12:00AM
Updated:	Jul 05 2016 09:28PM
Credit:	emmanuel law
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1 PHP PHP 5.5.0-DEV PHP PHP 5.4.1RC1-DEV PHP PHP 5.4.0beta2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 Apple Mac Os X 10.7.4 Apple Mac Os X 10.7.3 Apple Mac Os X 10.7.1
Not Vulnerable:

PHP CVE-2015-3329 Buffer Overflow Vulnerability

PHP is prone to a buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.

PHP CVE-2015-3329 Buffer Overflow Vulnerability

References:

• CVE-2015-3329 php: Buffer Over flow when parsing tar/zip/phar in phar_set_inode( (Red Hat Bugzilla)
  
• PHP Homepage (PHP)
  
• APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 (Apple)
  
• Oracle Linux Bulletin - January 2016 (Oracle)
  
• Security Advisory Important: php security and bug fix update (Redhat)