Description

The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

Remediation

References

CVE-2015-4599

Related Vulnerabilities

Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-8793)

Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-6754)

MySQL Use After Free Vulnerability (CVE-2019-7317)

Moodle 7PK - Security Features Vulnerability (CVE-2015-5331)

WordPress Plugin Backup & Restore Dropbox Multiple Vulnerabilities (1.4.7.5)

Severity

Critical

Classification

CVE-2015-4599 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities