Description

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.

Remediation

References

CVE-2015-6831

Related Vulnerabilities

WordPress Plugin WordPress Meta Robots SQL Injection (2.1)

Apache HTTP Server Other Vulnerability (CVE-2010-1452)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17824)

WordPress Plugin PureHTML 'alter.php' SQL Injection (1.0.0)

PHP Other Vulnerability (CVE-2006-7204)

Severity

High

Classification

CVE-2015-6831 CWE-416 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities