PHP Out Of Bounds Read Multiple Vulnerabilities - Jan15 Network Vulnerability

Summary

This host is installed with PHP and is prone to denial of service vulnerability.

Impact

Successful exploitation will allow remote attackers to obtain sensitive information and trigger unexpected code execution . Impact Level: Application

Solution

Upgrade to PHP version 5.4.37 or 5.5.21 or 5.6.5 or later

Insight

The flaw is due to an out-of-bounds read error in sapi/cgi/cgi_main.c in the CGI component in PHP.

Affected

PHP versions through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4

Detection

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

References

Updated on 2015-03-25

Severity

Classification

CVSS	Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Related Vulnerabilities

PHP Out of Bounds Read Multiple Vulnerabilities - Jan15