USN-2758-1

Dashboard / Vulnerabilities / USN-2758-1

USN-2758-1

Summary: php5 vulnerabilities

Details: It was discovered that the PHP phar extension incorrectly handled certain files. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2015-5589) It was discovered that the PHP phar extension incorrectly handled certain filepaths. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-5590) Taoguang Chen discovered that PHP incorrectly handled unserializing objects. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-6831, CVE-2015-6834, CVE-2015-6835 Sean Heelan discovered that PHP incorrectly handled unserializing objects. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-6832) It was discovered that the PHP phar extension incorrectly handled certain archives. A remote attacker could use this issue to cause files to be placed outside of the destination directory. (CVE-2015-6833) Andrea Palazzo discovered that the PHP Soap client incorrectly validated data types. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-6836) It was discovered that the PHP XSLTProcessor class incorrectly handled certain data. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2015-6837)

References: https://ubuntu.com/security/notices/USN-2758-1, https://ubuntu.com/security/CVE-2015-5589, https://ubuntu.com/security/CVE-2015-5590, https://ubuntu.com/security/CVE-2015-6831, https://ubuntu.com/security/CVE-2015-6832, https://ubuntu.com/security/CVE-2015-6833, https://ubuntu.com/security/CVE-2015-6834, https://ubuntu.com/security/CVE-2015-6835, https://ubuntu.com/security/CVE-2015-6836, https://ubuntu.com/security/CVE-2015-6837, https://ubuntu.com/security/CVE-2015-6838