CVE-2015-0273

Public Exploit

Description

Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 64.06% Top 5%

Vendor Advisory debian.org Vendor Advisory apple.com Vendor Advisory ubuntu.com Vendor Advisory marc.info Vendor Advisory apple.com Vendor Advisory marc.info Vendor Advisory mandriva.com Vendor Advisory apple.com Vendor Advisory opensuse.org Vendor Advisory marc.info Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory redhat.com Vendor Advisory redhat.com

Affected: n/a n/a

References

Link	Tags
http://www.debian.org/security/2015/dsa-3195	vendor advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html	vendor advisory
https://support.apple.com/HT205375
http://www.ubuntu.com/usn/USN-2535-1	vendor advisory
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor advisory
https://bugs.php.net/bug.php?id=68942	exploit
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html	vendor advisory
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
http://www.mandriva.com/security/advisories?name=MDVSA-2015:079	vendor advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html	vendor advisory
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor advisory
http://php.net/ChangeLog-5.php
https://bugzilla.redhat.com/show_bug.cgi?id=1194730
https://support.apple.com/HT205267
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html	vendor advisory
http://www.securitytracker.com/id/1031945	vdb entry
http://support.apple.com/kb/HT204942
http://www.securityfocus.com/bid/72701	vdb entry
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html	vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor advisory
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24
https://security.gentoo.org/glsa/201606-10	vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2015-0273?: CVE-2015-0273 has been scored as a high severity vulnerability.
How to fix CVE-2015-0273?: To fix CVE-2015-0273, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2015-0273 being actively exploited in the wild?: It is possible that CVE-2015-0273 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~64% probability that this vulnerability will be exploited by malicious actors in the next 30 days.