medium5.0Public exploit code

CVE-2015-4148

The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a strin…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration2015-09-24 · webapps · php

Impact

The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a "type confusion" issue.

Affected products

Vendor	Product	Affected versions
Apple	Mac Os X	through 10.10.4
Redhat	Enterprise Linux Desktop	Version 7.0
Redhat	Enterprise Linux Hpc Node	Version 7.0
Redhat	Enterprise Linux Hpc Node Eus	Version 7.1
Redhat	Enterprise Linux Server	Version 7.0
Redhat	Enterprise Linux Server Eus	Version 7.1
Redhat	Enterprise Linux Workstation	Version 7.0
Php	Php	through 5.4.38 Versions 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4

Weakness classification

CWE-20

Public exploit code

Impact

Affected products

Weakness classification

References