CVE-2014-3515

Description

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 60.79% Top 5%

Vendor Advisory redhat.com Vendor Advisory marc.info Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory php.net Vendor Advisory php.net

Affected: n/a n/a

References

Link	Tags
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab
http://www-01.ibm.com/support/docview.wss?uid=swg21683486	third party advisory
http://rhn.redhat.com/errata/RHSA-2014-1766.html	third party advisory vendor advisory
https://bugs.php.net/bug.php?id=67492	patch vendor advisory
http://marc.info/?l=bugtraq&m=141017844705317&w=2	mailing list third party advisory vendor advisory
http://www.debian.org/security/2014/dsa-2974	third party advisory vendor advisory
http://secunia.com/advisories/59794	third party advisory
http://www.php.net/ChangeLog-5.php	vendor advisory
http://secunia.com/advisories/60998	third party advisory
http://support.apple.com/kb/HT6443	third party advisory
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html	third party advisory
http://rhn.redhat.com/errata/RHSA-2014-1765.html	third party advisory vendor advisory
http://www.securityfocus.com/bid/68237	vdb entry third party advisory
http://secunia.com/advisories/59831	third party advisory
http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html	mailing list third party advisory vendor advisory

Frequently Asked Questions

What is the severity of CVE-2014-3515?: CVE-2014-3515 has been scored as a high severity vulnerability.
How to fix CVE-2014-3515?: To fix CVE-2014-3515, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2014-3515 being actively exploited in the wild?: It is possible that CVE-2014-3515 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~61% probability that this vulnerability will be exploited by malicious actors in the next 30 days.