CVE-2015-6831
Description
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
Risk Information
Base Score
7.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
1.156
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) apache2-mod_php53-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-bcmath-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-bz2-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-calendar-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-ctype-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-curl-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-dba-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-dom-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-exif-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-fastcgi-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-fileinfo-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-ftp-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-gd-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-gettext-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-gmp-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-iconv-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-intl-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-json-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-ldap-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-mbstring-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-mcrypt-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-mysql-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-odbc-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-openssl-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-pcntl-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-pdo-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-pear-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-pgsql-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-pspell-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-shmop-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-snmp-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-soap-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-suhosin-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-sysvmsg-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-sysvsem-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-sysvshm-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-tokenizer-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-wddx-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-xmlreader-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-xmlrpc-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-xmlwriter-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-xsl-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-zip-5.3.17-48.1.x86_64.rpm | Linux |
| SUSE-SU-2015:1818-1(SUSE Linux Enterprise Server 11-SP3 ) php53-zlib-5.3.17-48.1.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234