High severity · published May 16, 2016
CVE-2015-4604
The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a…
7.5
CVSS
7.1%
EPSS
No
On KEV
Description
The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PHP · PHP
through 5.4.39; 5.5.0; 5.5.1; 5.5.2; 5.5.3; 5.5.4; +27 more · source: NVD
EL
Enterprise Linux · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Hpc Node · Redhat
7.0 · source: NVD
EL
Enterprise Linux Hpc Node Eus · Redhat
7.1 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.1 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4604
git.php.net
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd
php.net
http://php.net/ChangeLog-5.php
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-1135.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-1186.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-1187.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/06/16/12
More from PHP
9.8
CVE-2026-109618
RCE via OOM corruption
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2016-10033
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability