CVE Feed

Dashboard / CVE / CVE-2015-0273

CVE-2015-0273

Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.

Published:Feb 19, 2015

Last Modified:Apr 12, 2025

EPS:Mar 30, 2015

EPSS Score:0.6728

CVSS Score:7.5

Affected Products

Vendor

Product

Action

Vendor

Php

Product

Php

Php

Php

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Rhel Software Collections

Redhat

Rhel Software Collections

Exploits

https://bugs.php.net/bug.php?id=68942 https://bugs.php.net/bug.php?id=68942 https://www.exploit-db.com/exploits/36158

Common Weakness Enumeration

CWE-416 Use After Free

Common Attack Pattern Enumeration and Classification (CAPEC)

No CAPEC recorded yet

Related CVEs

CVE-2026-14355 (CVSS 5.6) — In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRA…

CVE-2026-7263 (CVSS 6.3) — In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data in…

CVE-2026-6104 (CVSS 6.3) — In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL b…

CVE-2026-7258 (CVSS 6.3) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some fu…

CVE-2026-6722 (CVSS 9.5) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOA…

CVE-2026-7259 (CVSS 2.1) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a misma…

CVE-2026-7261 (CVSS 6.3) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when So…

CVE-2026-7262 (CVSS 2.9) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a …

CVE-2025-14179 (CVSS 7.4) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO…

CVE-2026-7568 (CVSS 6.3) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the met…

References

http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html

http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html

http://marc.info/?l=bugtraq&m=143403519711434&w=2

http://marc.info/?l=bugtraq&m=143748090628601&w=2

http://marc.info/?l=bugtraq&m=144050155601375&w=2

http://php.net/ChangeLog-5.php

http://rhn.redhat.com/errata/RHSA-2015-1053.html

http://rhn.redhat.com/errata/RHSA-2015-1066.html

http://rhn.redhat.com/errata/RHSA-2015-1135.html

http://rhn.redhat.com/errata/RHSA-2015-1218.html

http://support.apple.com/kb/HT204942

http://www.debian.org/security/2015/dsa-3195

http://www.mandriva.com/security/advisories?name=MDVSA-2015:079

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.securityfocus.com/bid/72701

http://www.securitytracker.com/id/1031945

http://www.ubuntu.com/usn/USN-2535-1

https://bugs.php.net/bug.php?id=68942

https://bugzilla.redhat.com/show_bug.cgi?id=1194730

https://security.gentoo.org/glsa/201606-10

https://support.apple.com/HT205267

https://support.apple.com/HT205375

http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html

http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html

http://marc.info/?l=bugtraq&m=143403519711434&w=2

http://marc.info/?l=bugtraq&m=143748090628601&w=2

http://marc.info/?l=bugtraq&m=144050155601375&w=2

http://php.net/ChangeLog-5.php

http://rhn.redhat.com/errata/RHSA-2015-1053.html

http://rhn.redhat.com/errata/RHSA-2015-1066.html

http://rhn.redhat.com/errata/RHSA-2015-1135.html

http://rhn.redhat.com/errata/RHSA-2015-1218.html

http://support.apple.com/kb/HT204942

http://www.debian.org/security/2015/dsa-3195

http://www.mandriva.com/security/advisories?name=MDVSA-2015:079

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.securityfocus.com/bid/72701

http://www.securitytracker.com/id/1031945

http://www.ubuntu.com/usn/USN-2535-1

https://bugs.php.net/bug.php?id=68942

https://bugzilla.redhat.com/show_bug.cgi?id=1194730

https://security.gentoo.org/glsa/201606-10

https://support.apple.com/HT205267

https://support.apple.com/HT205375

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High