CVE-2015-4601

CRITICAL · 9.8 CVSS Gepubliceerd: 16-05-2016

Beschrijving

PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.

Vendors

Redhat Php

Affected products

Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Hpc Node Eus Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation Php

References

git.php.net
php.net
rhn.redhat.com
rhn.redhat.com
www.openwall.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com