cbcvebase.
CVE-2015-1351
published 2015-03-30

CVE-2015-1351: Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers…

high7.5CVSS 3.1
AVNACLAuNCPIPAP
Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Affected

9 ranges
VendorProductVersion rangeFixed in
applemac_os_x<= 10.6.8
appleos_x_el_capitan_v10.11
oraclelinux
oraclelinux
oraclesecure_backup<= 12.1.0.1.0
oraclesolaris
phpphp< 5.5.245.5.24
phpphp>= 5.6.0 < 5.6.85.6.8
php5php5>= 0 < 5.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.6

CVSS provenance

nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH