PHP CVE-2015-4601 Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	75246
Class:	Input Validation Error
CVE:	CVE-2015-4601
Remote:	Yes
Local:	No
Published:	Apr 16 2015 12:00AM
Updated:	Jul 05 2016 10:04PM
Credit:	taoguangchen
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1
Not Vulnerable:

PHP CVE-2015-4601 Multiple Memory Corruption Vulnerabilities

PHP is prone to multiple memory-corruption vulnerabilities.

Attackers can exploit these issues to crash the application, resulting in a denial-of-service condition.

PHP CVE-2015-4601 Multiple Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PHP CVE-2015-4601 Multiple Memory Corruption Vulnerabilities

References:

• Added type checks (PHP)
  
• Added type checks (PHP)
  
• PHP 5 ChangeLog (PHP)
  
• PHP Homepage (PHP)
  
• Sec Bug #69152: Type Confusion Infoleak Vulnerability in unserialize() with Soap (PHP)
  
• Oracle Linux Bulletin - January 2016 (Oracle)
  
• Security Advisory - AlienVault v5.2 addresses 55 vulnerabilities (AlienVault)
  
• Security Advisory Important: php security and bug fix update (Redhat)
  
• Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Manag (IBM)
  
• Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (IBM)