CVE-2015-4599

Severity

99%

Complexity

99%

Confidentiality

165%

Access of Resource Using Incompatible Type ('Type Confusion')

The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

Access of Resource Using Incompatible Type ('Type Confusion')

CVSS 3.0 Base Score 9.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 8 years ago

2016-05-16 10:59:00

Last updated 7 years ago

2018-01-05 02:30:00

Affected Software

PHP PHP

PHP 5.5.0

5.5.0

PHP 5.5.1

5.5.1

PHP 5.5.2

5.5.2

PHP 5.5.3

5.5.3

PHP 5.5.4

5.5.4

PHP 5.5.5

5.5.5

PHP 5.5.6

5.5.6

PHP 5.5.7

5.5.7

PHP 5.5.8

5.5.8

PHP 5.5.9

5.5.9

PHP 5.5.10

5.5.10

PHP 5.5.11

5.5.11

PHP 5.5.12

5.5.12

PHP 5.5.13

5.5.13

PHP 5.5.14

5.5.14

PHP 5.5.15

5.5.15

PHP 5.5.16

5.5.16

PHP 5.5.17

5.5.17

PHP 5.5.18

5.5.18

PHP 5.5.19

5.5.19

PHP 5.5.20

5.5.20

PHP 5.5.21

5.5.21

PHP 5.5.22

5.5.22

PHP 5.5.23

5.5.23

PHP 5.6.0

5.6.0

PHP PHP 5.6.1

5.6.1

PHP 5.6.2

5.6.2

PHP 5.6.3

5.6.3

PHP 5.6.4

5.6.4

PHP 5.6.5

5.6.5

PHP 5.6.6

5.6.6

PHP 5.6.7

5.6.7

RedHat Enterprise Linux Desktop 7.0

7.0

RedHat Enterprise Linux HPC Node 7.0

7.0

RedHat Enterprise Linux Server 7.0

7.0

RedHat Enterprise Linux Workstation 7.0

7.0

References

http://git.php.net/?p=php-src.git;a=commit;h=51856a76f87ecb24fe1385342be43610fb6c86e4

http://php.net/ChangeLog-5.php

RHSA-2015:1135

RHSA-2015:1218

[oss-security] 20150616 Re: CVE Request: various issues in PHP

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

75251

1032709

https://bugs.php.net/bug.php?id=69152

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.