CVE-2015-4022

HIGH

Description

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.

ID	Name	Product	Family	Severity
124996	EulerOS Virtualization 3.0.1.0 : php (EulerOS-SA-2019-1543)	Nessus	Huawei Local Security Checks	high
98832	PHP 5.6.x < 5.6.9 Multiple Vulnerabilities	Web Application Scanning	Component Vulnerability	high
119968	SUSE SLES12 Security Update : php5 (SUSE-SU-2015:1253-1)	Nessus	SuSE Local Security Checks	critical
93161	SUSE SLES11 Security Update : php53 (SUSE-SU-2016:1638-1) (BACKRONYM)	Nessus	SuSE Local Security Checks	critical
91704	GLSA-201606-10 : PHP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
8981	Mac OS X < 10.10.5 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	high
85808	Debian DLA-307-1 : php5 security update	Nessus	Debian Local Security Checks	critical
85566	Tenable SecurityCenter Multiple PHP Vulnerabilities (TNS-2015-06)	Nessus	Misc.	high
85409	Mac OS X Multiple Vulnerabilities (Security Update 2015-006)	Nessus	MacOS X Local Security Checks	high
85408	Mac OS X 10.10.x < 10.10.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
84661	Scientific Linux Security Update : php on SL6.x i386/x86_64 (20150709)	Nessus	Scientific Linux Local Security Checks	critical
84660	RHEL 6 : php (RHSA-2015:1218)	Nessus	Red Hat Local Security Checks	critical
84659	Oracle Linux 6 : php (ELSA-2015-1218)	Nessus	Oracle Linux Local Security Checks	critical
84648	CentOS 6 : php (CESA-2015:1218)	Nessus	CentOS Local Security Checks	critical
84563	Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : php5 vulnerabilities (USN-2658-1)	Nessus	Ubuntu Local Security Checks	critical
84394	Scientific Linux Security Update : php on SL7.x x86_64 (20150623)	Nessus	Scientific Linux Local Security Checks	critical
84355	RHEL 7 : php (RHSA-2015:1135)	Nessus	Red Hat Local Security Checks	critical
84351	Oracle Linux 7 : php (ELSA-2015-1135)	Nessus	Oracle Linux Local Security Checks	critical
84345	CentOS 7 : php (CESA-2015:1135)	Nessus	CentOS Local Security Checks	critical
8786	PHP 5.6.x < 5.6.9 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
84127	Slackware 14.0 / 14.1 / current : php (SSA:2015-162-02)	Nessus	Slackware Local Security Checks	high
84082	SUSE SLES11 Security Update : php53 (SUSE-SU-2015:1018-1)	Nessus	SuSE Local Security Checks	high
84025	Debian DSA-3280-1 : php5 - security update	Nessus	Debian Local Security Checks	high
83983	openSUSE Security Update : php5 (openSUSE-2015-396)	Nessus	SuSE Local Security Checks	high
83975	Amazon Linux AMI : php56 (ALAS-2015-536)	Nessus	Amazon Linux Local Security Checks	high
83974	Amazon Linux AMI : php55 (ALAS-2015-535)	Nessus	Amazon Linux Local Security Checks	high
83973	Amazon Linux AMI : php54 (ALAS-2015-534)	Nessus	Amazon Linux Local Security Checks	high
83896	Fedora 21 : php-5.6.9-1.fc21 (2015-8383)	Nessus	Fedora Local Security Checks	high
83895	Fedora 20 : php-5.5.25-1.fc20 (2015-8370)	Nessus	Fedora Local Security Checks	high
83835	Fedora 22 : php-5.6.9-1.fc22 (2015-8281)	Nessus	Fedora Local Security Checks	high
83792	FreeBSD : php -- multiple vulnerabilities (31de2e13-00d2-11e5-a072-d050996490d0)	Nessus	FreeBSD Local Security Checks	high
83519	PHP 5.6.x < 5.6.9 Multiple Vulnerabilities	Nessus	CGI abuses	high
83518	PHP 5.5.x < 5.5.25 Multiple Vulnerabilities	Nessus	CGI abuses	high
83517	PHP 5.4.x < 5.4.41 Multiple Vulnerabilities	Nessus	CGI abuses	high

CVE-2015-4022

Description

References

Details

Risk Information

CVSS v2.0