critical9.8Public exploit code

CVE-2015-6834

Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

PHP 5.4/5.5/5.6 - SplObjectStorage 'Unserialize()' Use-After-Free2015-09-09 · dos · php · Verified
PHP 5.4/5.5/5.6 - SplDoublyLinkedList 'Unserialize()' Use-After-Free2015-09-09 · dos · php · Verified

Impact

Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.

Affected products

Vendor	Product	Affected versions
Php	Php	through 5.4.44 Versions 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4

Public exploit code

Impact

Affected products

References