Wind River Support Network


LIN6-10764 : Security Advisory - php - CVE-2015-6831

Created: Jan 27, 2016    Updated: Dec 3, 2018
Resolved Date: Feb 1, 2016
Previous ID: SCP6-644
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.<a href=>CWE-416: Use After Free</a>

Other Downloads

Live chat