Use-after-free error in PHP - CVE-2015-2301
Published: November 27, 2018
Vulnerability identifier: #VU16108
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-2301
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists due to use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6. A remote attacker can trigger memory corruption via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file and cause the service to crash.
Affected software
PHP
Amazon Linux AMI
Slackware Linux
php5 (Ubuntu package)
Amazon Linux AMI
Slackware Linux
php5 (Ubuntu package)
How to mitigate CVE-2015-2301
Install update from vendor's website.
PHP - addressed in versions 5.5.22, 5.6.6
php5 (Ubuntu package) - addressed in versions 5.3.2-1ubuntu4.29, 5.3.10-1ubuntu3.17, 5.5.9+dfsg-1ubuntu4.7, 5.5.12+dfsg-2ubuntu4.3
php5 (Ubuntu package) - addressed in versions 5.3.2-1ubuntu4.29, 5.3.10-1ubuntu3.17, 5.5.9+dfsg-1ubuntu4.7, 5.5.12+dfsg-2ubuntu4.3