Skip to content
OpenAdvisories
Unscored USN-2786-1 2 CVEs

php5 vulnerabilities

Published Oct 28, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the PHP phar extension incorrectly handled certain
files. A remote attacker could use this issue to cause PHP to crash,
resulting in a denial of service. (CVE-2015-7803, CVE-2015-7804)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS php5 5.5.9+dfsg-1ubuntu4.14

Vulnerabilities 2

  • Unscored —
    CVE-2015-7803 EPSS 10%

    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attacker…

    php5 Ubuntu
  • Unscored —
    CVE-2015-7804

    Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allo…

    php5 Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-7803
  • report
    https://ubuntu.com/security/CVE-2015-7804