Описание
/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| php5 | fixed | 5.6.23+dfsg-1 | package | |
| php5 | fixed | 5.6.23+dfsg-0+deb8u1 | jessie | package |
Примечания
The issue was introduced as part CVE-2015-6833, which was applied upstream
in versions 5.4.44, 5.5.28, and 5.6.12.
https://bugs.php.net/bug.php?id=72321
https://git.php.net/?p=php-src.git;a=commitdiff;h=d144590d38fa321b46b8e199c754006318985c84
Fixed in 5.6.23
EPSS
Связанные уязвимости
/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.
/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.
/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.
/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.
Уязвимость компонента /ext/phar/phar_object.c интерпретатора PHP, позволяющая нарушителю выполнить произвольный код
EPSS