CVE-2015-4598

CWE-20 — Improper Input ValidationCWE-6268 documents7 sources
Severity
6.5MEDIUM
EPSS
1.5%
top 19.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
PHP PHPRedhat Enterprise LinuxRedhat Enterprise Linux Desktop+5 more
Timeline
PublishedMay 16
Latest updateMay 14

Description

PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\0.html attack that bypasses an intended configuration in which client users may write to only .html files.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages6 packages

▶Ubuntuphp5< 5.5.9+dfsg-1ubuntu4.11
▶NVDphp/php5.4.41+36

Also affects: Enterprise Linux 6.0, 7.0, 7.1

🔴Vulnerability Details

4
GHSA
GHSA-6x7r-m64x-22r6: PHP before 5↗2022-05-14
▶
CVEList
CVE-2015-4598: PHP before 5↗2016-05-16
▶
OSV
php5 vulnerabilities↗2015-07-06
▶
OSV
CVE-2015-4598: PHP before 5↗2015-06-17
▶

📋Vendor Advisories

2
Ubuntu
PHP vulnerabilities↗2015-07-06
▶
Red Hat
php: missing null byte checks for paths in DOM and GD extensions↗2015-05-28
▶

💬Community

1
Bugzilla
CVE-2015-4598 php: missing null byte checks for paths in DOM and GD extensions↗2015-06-17
▶
CVE-2015-4598 (MEDIUM CVSS 6.5) | PHP before 5.4.42 | cvebase.io