CVE-2015-2787

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.

Affected Software

Name	Vendor	Start Version	End Version
Php	Php	*	5.4.38 (including)
Php	Php	5.5.0 (including)	5.5.0 (including)
Php	Php	5.5.0-alpha1 (including)	5.5.0-alpha1 (including)
Php	Php	5.5.0-alpha2 (including)	5.5.0-alpha2 (including)
Php	Php	5.5.0-alpha3 (including)	5.5.0-alpha3 (including)
Php	Php	5.5.0-alpha4 (including)	5.5.0-alpha4 (including)
Php	Php	5.5.0-alpha5 (including)	5.5.0-alpha5 (including)
Php	Php	5.5.0-alpha6 (including)	5.5.0-alpha6 (including)
Php	Php	5.5.0-beta1 (including)	5.5.0-beta1 (including)
Php	Php	5.5.0-beta2 (including)	5.5.0-beta2 (including)
Php	Php	5.5.0-beta3 (including)	5.5.0-beta3 (including)
Php	Php	5.5.0-beta4 (including)	5.5.0-beta4 (including)
Php	Php	5.5.0-rc1 (including)	5.5.0-rc1 (including)
Php	Php	5.5.0-rc2 (including)	5.5.0-rc2 (including)
Php	Php	5.5.1 (including)	5.5.1 (including)
Php	Php	5.5.2 (including)	5.5.2 (including)
Php	Php	5.5.3 (including)	5.5.3 (including)
Php	Php	5.5.4 (including)	5.5.4 (including)
Php	Php	5.5.5 (including)	5.5.5 (including)
Php	Php	5.5.6 (including)	5.5.6 (including)
Php	Php	5.5.7 (including)	5.5.7 (including)
Php	Php	5.5.8 (including)	5.5.8 (including)
Php	Php	5.5.9 (including)	5.5.9 (including)
Php	Php	5.5.10 (including)	5.5.10 (including)
Php	Php	5.5.11 (including)	5.5.11 (including)
Php	Php	5.5.12 (including)	5.5.12 (including)
Php	Php	5.5.13 (including)	5.5.13 (including)
Php	Php	5.5.14 (including)	5.5.14 (including)
Php	Php	5.5.15 (including)	5.5.15 (including)
Php	Php	5.5.16 (including)	5.5.16 (including)
Php	Php	5.5.17 (including)	5.5.17 (including)
Php	Php	5.5.18 (including)	5.5.18 (including)
Php	Php	5.5.19 (including)	5.5.19 (including)
Php	Php	5.5.20 (including)	5.5.20 (including)
Php	Php	5.5.21 (including)	5.5.21 (including)
Php	Php	5.5.22 (including)	5.5.22 (including)
Php	Php	5.6.0-alpha1 (including)	5.6.0-alpha1 (including)
Php	Php	5.6.0-alpha2 (including)	5.6.0-alpha2 (including)
Php	Php	5.6.0-alpha3 (including)	5.6.0-alpha3 (including)
Php	Php	5.6.0-alpha4 (including)	5.6.0-alpha4 (including)
Php	Php	5.6.0-alpha5 (including)	5.6.0-alpha5 (including)
Php	Php	5.6.0-beta1 (including)	5.6.0-beta1 (including)
Php	Php	5.6.0-beta2 (including)	5.6.0-beta2 (including)
Php	Php	5.6.0-beta3 (including)	5.6.0-beta3 (including)
Php	Php	5.6.0-beta4 (including)	5.6.0-beta4 (including)
Php	Php	5.6.1 (including)	5.6.1 (including)
Php	Php	5.6.2 (including)	5.6.2 (including)
Php	Php	5.6.3 (including)	5.6.3 (including)
Php	Php	5.6.4 (including)	5.6.4 (including)
Php	Php	5.6.5 (including)	5.6.5 (including)
Php	Php	5.6.6 (including)	5.6.6 (including)
Red Hat Enterprise Linux 6	RedHat	php-0:5.3.3-46.el6_6	*
Red Hat Enterprise Linux 7	RedHat	php-0:5.4.16-36.el7_1	*
Red Hat Software Collections for Red Hat Enterprise Linux 6	RedHat	php55-0:2.0-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6	RedHat	php55-php-0:5.5.21-2.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6	RedHat	php54-0:2.0-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6	RedHat	php54-php-0:5.4.40-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6	RedHat	php54-php-pecl-zendopcache-0:7.0.4-3.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS	RedHat	php55-0:2.0-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS	RedHat	php55-php-0:5.5.21-2.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS	RedHat	php54-0:2.0-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS	RedHat	php54-php-0:5.4.40-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS	RedHat	php54-php-pecl-zendopcache-0:7.0.4-3.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS	RedHat	php55-0:2.0-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS	RedHat	php55-php-0:5.5.21-2.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS	RedHat	php54-0:2.0-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS	RedHat	php54-php-0:5.4.40-1.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS	RedHat	php54-php-pecl-zendopcache-0:7.0.4-3.el6	*
Red Hat Software Collections for Red Hat Enterprise Linux 7	RedHat	php55-0:2.0-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7	RedHat	php55-php-0:5.5.21-2.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7	RedHat	php54-0:2.0-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7	RedHat	php54-php-0:5.4.40-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7	RedHat	php54-php-pecl-zendopcache-0:7.0.4-3.el7	*
Php5	Ubuntu	devel	*
Php5	Ubuntu	esm-infra-legacy/trusty	*
Php5	Ubuntu	lucid	*
Php5	Ubuntu	precise	*
Php5	Ubuntu	trusty	*
Php5	Ubuntu	trusty/esm	*
Php5	Ubuntu	upstream	*
Php5	Ubuntu	utopic	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-2787
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References