PHP 'do_soap_call()' Function Type Confusion Information Disclosure Vulnerability

Bugtraq ID:	75103
Class:	Design Error
CVE:	CVE-2015-4148
Remote:	Yes
Local:	No
Published:	Jun 09 2015 12:00AM
Updated:	Jul 06 2016 02:22PM
Credit:	The vendor reported this issue.
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1 PHP PHP 5.3.13 PHP PHP 5.3.12 PHP PHP 5.3.9 PHP PHP 5.3.8 PHP PHP 5.3.7 PHP PHP 5.3.6 PHP PHP 5.3.5 PHP PHP 5.3.2 PHP PHP 5.3.1 PHP PHP 5.3 PHP PHP 5.3.4 PHP PHP 5.3.3 PHP PHP 5.3.11 PHP PHP 5.3.10
Not Vulnerable:

PHP 'do_soap_call()' Function Type Confusion Information Disclosure Vulnerability

PHP is prone to an information-disclosure vulnerability because of a type confusion error.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

PHP 'do_soap_call()' Function Type Confusion Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.