CVE-2015-6831

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary…

published January 19, 2016

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07057 · 94.1th percentile
Published
2016-01-19T02:00Z
EPSS history
Timeline
  • 19 JAN 02:00Z
    Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary…
    cvelistv5