CVE-2014-3515
NoneCVSS
—
EPSS
30.1%
Published
Jul 9, 2014
CISA due date
—
The record
The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | php5 | 0 | 5.3.3-7+squeeze21 |
| Debian:7 | php5 | 0 | 5.4.4-14+deb7u12 |
| Mageia:3 | php | 0 | 5.4.30-1.mga3 |
| Mageia:3 | php-apc | 0 | 3.1.14-7.10.mga3 |
| Mageia:3 | php-gd-bundled | 0 | 5.4.30-1.mga3 |
| Mageia:4 | php | 0 | 5.5.14-1.mga4 |
| Mageia:4 | php-apc | 0 | 3.1.15-4.5.mga4 |
| Red Hat:enterprise_linux:5::client_workstation | php53 | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-bcmath | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-cli | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-common | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-dba | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-debuginfo | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-devel | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-gd | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-imap | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-intl | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-ldap | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mbstring | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mysql | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-odbc | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pdo | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pgsql | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-process | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pspell | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-snmp | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-soap | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xml | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xmlrpc | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53 | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-bcmath | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-cli | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-common | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-dba | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-debuginfo | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-devel | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-gd | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-imap | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-intl | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-ldap | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-mbstring | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-mysql | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-odbc | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-pdo | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-pgsql | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-process | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-pspell | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-snmp | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-soap | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-xml | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-xmlrpc | 0 | 0:5.3.3-23.el5_10 |
| Red Hat:enterprise_linux:6::client | php | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-bcmath | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-cli | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-common | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-dba | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-debuginfo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-devel | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-embedded | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-enchant | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-fpm | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-gd | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-imap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-intl | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-ldap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-mbstring | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-mysql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-odbc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-pdo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-pgsql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-process | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-pspell | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-recode | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-snmp | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-soap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-tidy | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-xml | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-xmlrpc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::client | php-zts | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-bcmath | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-cli | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-common | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-dba | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-debuginfo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-devel | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-embedded | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-enchant | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-fpm | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-gd | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-imap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-intl | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-ldap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-mbstring | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-mysql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-odbc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-pdo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-pgsql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-process | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-pspell | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-recode | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-snmp | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-soap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-tidy | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-xml | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-xmlrpc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::computenode | php-zts | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-bcmath | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-cli | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-common | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-dba | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-debuginfo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-devel | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-embedded | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-enchant | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-fpm | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-gd | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-imap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-intl | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-ldap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-mbstring | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-mysql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-odbc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-pdo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-pgsql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-process | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-pspell | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-recode | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-snmp | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-soap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-tidy | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-xml | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-xmlrpc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::server | php-zts | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-bcmath | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-cli | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-common | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-dba | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-debuginfo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-devel | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-embedded | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-enchant | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-fpm | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-gd | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-imap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-intl | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-ldap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-mbstring | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-mysql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-odbc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-pdo | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-pgsql | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-process | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-pspell | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-recode | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-snmp | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-soap | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-tidy | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-xml | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-xmlrpc | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:6::workstation | php-zts | 0 | 0:5.3.3-27.el6_5.1 |
| Red Hat:enterprise_linux:7::client | php | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-bcmath | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-cli | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-common | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-dba | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-debuginfo | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-devel | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-embedded | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-enchant | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-fpm | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-gd | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-intl | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-ldap | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-mbstring | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-mysql | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-mysqlnd | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-odbc | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-pdo | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-pgsql | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-process | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-pspell | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-recode | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-snmp | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-soap | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-xml | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::client | php-xmlrpc | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-bcmath | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-cli | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-common | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-dba | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-debuginfo | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-devel | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-embedded | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-enchant | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-fpm | 0 | 0:5.4.16-23.el7_0 |
| Red Hat:enterprise_linux:7::computenode | php-gd | 0 | 0:5.4.16-23.el7_0 |
Related vulnerabilities
- CVE-2015-6834 Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and… Also affects php5
- CVE-2015-5589 The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x… Also affects php5
- CVE-2015-4643 Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x… Also affects php5
- CVE-2015-4602 The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before… Also affects php5
- CVE-2015-4600 The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before… Also affects php5
- CVE-2015-4599 The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before… Also affects php5
- CVE-2015-3411 PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that… Also affects php5
- CVE-2015-6836 The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before… Also affects php5