Skip to content
OpenAdvisories
Unscored CVE-2015-5590 EUVD-2015-5544GHSA-pgw2-68qc-crv4

Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x befor…

Published Jan 19, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Package: php5 Ecosystem: Ubuntu

Description

Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 8 php5 5.6.12+dfsg-0+deb8u1 DSA-3344-1
Debian 7 php5 5.4.44-0+deb7u1 DSA-3344-1
Debian 6.0 php5 5.3.3.1-7+squeeze27 DLA-307-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS php5 5.5.9+dfsg-1ubuntu4.13 USN-2758-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 2 rh-php56-php +27 5.6.5-8.el6 RHSA-2016:0457

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 php5 5.5.14-33.2 SUSE-SU-2015:1425-1
SLES 11 SP4 php53 5.3.17-45.1 SUSE-SU-2015:1466-1
SLES 11 SP3 php53 5.3.17-45.1 SUSE-SU-2015:1466-1
SLES 11 SP2 php53 5.3.17-47.1 SUSE-SU-2016:1638-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 11 SP4 php53 5.3.17-45.1 SUSE-SU-2015:1466-1
SLES for SAP 11 SP3 php53 5.3.17-45.1 SUSE-SU-2015:1466-1

Advisories 7

References