The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Partial Red Hat: 13 fixed, 1 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a "deconfigured interpreter."
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 61
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:* | 6 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:* | 7 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:* | 11.2 | Vulnerable | Oracle |
| cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | up to 10.10.4 | Vulnerable | Apple |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
- cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:* Versions 6 Vulnerable ·Oracle
- cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:* Versions 7 Vulnerable ·Oracle
- cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:* Versions 11.2 Vulnerable ·Oracle
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions up to 10.10.4 Vulnerable ·Apple
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
Show 51 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:a:php:php:*:*:*:*:*:*:*:* | up to 5.4.39 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:* | 5.5.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:* | 5.5.0 alpha1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:* | 5.5.0 alpha2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:* | 5.5.0 alpha3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:* | 5.5.0 alpha4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:* | 5.5.0 alpha5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:* | 5.5.0 alpha6 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:* | 5.5.0 beta1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:* | 5.5.0 beta2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:* | 5.5.0 beta3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:* | 5.5.0 beta4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:* | 5.5.0 rc1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:* | 5.5.0 rc2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:* | 5.5.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:* | 5.5.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:* | 5.5.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:* | 5.5.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:* | 5.5.5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:* | 5.5.6 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:* | 5.5.7 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:* | 5.5.8 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:* | 5.5.9 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:* | 5.5.10 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:* | 5.5.11 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:* | 5.5.12 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:* | 5.5.13 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:* | 5.5.14 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:* | 5.5.18 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:* | 5.5.19 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:* | 5.5.20 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:* | 5.5.21 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:* | 5.5.22 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:* | 5.5.23 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:* | 5.6.0 alpha1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:* | 5.6.0 alpha2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:* | 5.6.0 alpha3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:* | 5.6.0 alpha4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:* | 5.6.0 alpha5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:* | 5.6.0 beta1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:* | 5.6.0 beta2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:* | 5.6.0 beta3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:* | 5.6.0 beta4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:* | 5.6.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:* | 5.6.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:* | 5.6.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:* | 5.6.5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:* | 5.6.6 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:* | 5.6.7 | Vulnerable | PHP |
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:* Versions up to 5.4.39 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:* Versions 5.5.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:* Versions 5.5.0 alpha1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:* Versions 5.5.0 alpha2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:* Versions 5.5.0 alpha3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:* Versions 5.5.0 alpha4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:* Versions 5.5.0 alpha5 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:* Versions 5.5.0 alpha6 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:* Versions 5.5.0 beta1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:* Versions 5.5.0 beta2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:* Versions 5.5.0 beta3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:* Versions 5.5.0 beta4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:* Versions 5.5.0 rc1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:* Versions 5.5.0 rc2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:* Versions 5.5.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:* Versions 5.5.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:* Versions 5.5.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:* Versions 5.5.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:* Versions 5.5.5 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:* Versions 5.5.6 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:* Versions 5.5.7 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:* Versions 5.5.8 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:* Versions 5.5.9 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:* Versions 5.5.10 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:* Versions 5.5.11 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:* Versions 5.5.12 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:* Versions 5.5.13 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:* Versions 5.5.14 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:* Versions 5.5.18 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:* Versions 5.5.19 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:* Versions 5.5.20 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:* Versions 5.5.21 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:* Versions 5.5.22 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:* Versions 5.5.23 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:* Versions 5.6.0 alpha1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:* Versions 5.6.0 alpha2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:* Versions 5.6.0 alpha3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:* Versions 5.6.0 alpha4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:* Versions 5.6.0 alpha5 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:* Versions 5.6.0 beta1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:* Versions 5.6.0 beta2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:* Versions 5.6.0 beta3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:* Versions 5.6.0 beta4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:* Versions 5.6.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:* Versions 5.6.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:* Versions 5.6.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:* Versions 5.6.5 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:* Versions 5.6.6 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:* Versions 5.6.7 Vulnerable ·PHP
Remediation
Red Hat 4 advisories
- RHSA-2015:1187 Released 2015-06-25 · Red Hat rating Importantrh-php56-php security update
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-php56-php-5.6.5-7.el6, rh-php56-php-bcmath-5.6.5-7.el6, rh-php56-php-cli-5.6.5-7.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-php56-php-5.6.5-7.el7, rh-php56-php-bcmath-5.6.5-7.el7, rh-php56-php-cli-5.6.5-7.el7 +24
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) rh-php56-php-5.6.5-7.el6, rh-php56-php-bcmath-5.6.5-7.el6, rh-php56-php-cli-5.6.5-7.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) rh-php56-php-5.6.5-7.el6, rh-php56-php-bcmath-5.6.5-7.el6, rh-php56-php-cli-5.6.5-7.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) rh-php56-php-5.6.5-7.el7, rh-php56-php-bcmath-5.6.5-7.el7, rh-php56-php-cli-5.6.5-7.el7 +24
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-php56-php-5.6.5-7.el6, rh-php56-php-bcmath-5.6.5-7.el6, rh-php56-php-cli-5.6.5-7.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-php56-php-5.6.5-7.el7, rh-php56-php-bcmath-5.6.5-7.el7, rh-php56-php-cli-5.6.5-7.el7 +24
- RHSA-2015:1186 Released 2015-06-25 · Red Hat rating Importantphp55-php security update
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) php55-php-5.5.21-4.el6, php55-php-bcmath-5.5.21-4.el6, php55-php-cli-5.5.21-4.el6 +24
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) php55-php-5.5.21-4.el7, php55-php-bcmath-5.5.21-4.el7, php55-php-cli-5.5.21-4.el7 +22
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) php55-php-5.5.21-4.el6, php55-php-bcmath-5.5.21-4.el6, php55-php-cli-5.5.21-4.el6 +24
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) php55-php-5.5.21-4.el6, php55-php-bcmath-5.5.21-4.el6, php55-php-cli-5.5.21-4.el6 +24
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) php55-php-5.5.21-4.el7, php55-php-bcmath-5.5.21-4.el7, php55-php-cli-5.5.21-4.el7 +22
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) php55-php-5.5.21-4.el6, php55-php-bcmath-5.5.21-4.el6, php55-php-cli-5.5.21-4.el6 +24
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) php55-php-5.5.21-4.el7, php55-php-bcmath-5.5.21-4.el7, php55-php-cli-5.5.21-4.el7 +22
- RHSA-2015:1135 Released 2015-06-23 · Red Hat rating Importantphp security and bug fix update
- Red Hat Enterprise Linux Client Optional (v. 7) php-5.4.16-36.el7_1, php-bcmath-5.4.16-36.el7_1, php-cli-5.4.16-36.el7_1 +22
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) php-5.4.16-36.el7_1, php-bcmath-5.4.16-36.el7_1, php-cli-5.4.16-36.el7_1 +22
- Red Hat Enterprise Linux Server (v. 7) php-5.4.16-36.ael7b_1, php-5.4.16-36.el7_1, php-cli-5.4.16-36.ael7b_1 +25
- Red Hat Enterprise Linux Server Optional (v. 7) php-bcmath-5.4.16-36.ael7b_1, php-bcmath-5.4.16-36.el7_1, php-dba-5.4.16-36.ael7b_1 +19
- Red Hat Enterprise Linux Workstation (v. 7) php-5.4.16-36.el7_1, php-cli-5.4.16-36.el7_1, php-common-5.4.16-36.el7_1 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) php-bcmath-5.4.16-36.el7_1, php-dba-5.4.16-36.el7_1, php-devel-5.4.16-36.el7_1 +8
Show 1 more Red Hat advisories
- RHSA-2015:1066 Released 2015-06-04 · Red Hat rating Importantphp54 security and bug fix update
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) php54-2.0-1.el6, php54-php-5.4.40-1.el6, php54-php-bcmath-5.4.40-1.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) php54-2.0-1.el7, php54-php-5.4.40-1.el7, php54-php-bcmath-5.4.40-1.el7 +24
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) php54-2.0-1.el6, php54-php-5.4.40-1.el6, php54-php-bcmath-5.4.40-1.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) php54-2.0-1.el6, php54-php-5.4.40-1.el6, php54-php-bcmath-5.4.40-1.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) php54-2.0-1.el6, php54-php-5.4.40-1.el6, php54-php-bcmath-5.4.40-1.el6 +26
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) php54-2.0-1.el7, php54-php-5.4.40-1.el7, php54-php-bcmath-5.4.40-1.el7 +24
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Software Collections | Affected | No fix yet |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2015:1135 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2015:1135 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2015:1135 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2015:1135 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2015:1135 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2015:1135 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2015:1066, RHSA-2015:1186, RHSA-2015:1187 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2015:1066, RHSA-2015:1186, RHSA-2015:1187 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) | Fixed | RHSA-2015:1066, RHSA-2015:1186, RHSA-2015:1187 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) | Fixed | RHSA-2015:1066, RHSA-2015:1186, RHSA-2015:1187 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) | Fixed | RHSA-2015:1186, RHSA-2015:1187 |
| Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2015:1066, RHSA-2015:1186, RHSA-2015:1187 |
| Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2015:1066, RHSA-2015:1186, RHSA-2015:1187 |
Not affected: 2 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2015-3330
- 2026-10-03 Alias added: GHSA-2879-hr6w-p3mx
References
Advisory 15
- RHSA-2015:1187
- RHSA-2015:1186
- APPLE-SA-2015-09-30-3
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
- SUSE-SU-2015:0868
- https://support.apple.com/HT205267
- APPLE-SA-2015-08-13-2
- USN-2572-1
- RHSA-2015:1135
- https://support.apple.com/kb/HT205031
- openSUSE-SU-2015:0855
- [oss-security] 20150417 Re: CVE Request: PHP potential remote code execution with apache 2.4 apache2handler
- GLSA-201606-10
- RHSA-2015:1066
Sources
- CVE-2015-3330 · CVE Program
- CVE-2015-3330 · NVD
- FIRST EPSS
- GHSA-2879-hr6w-p3mx · GitHub Advisory Database · CC BY 4.0
- CVE-2015-3330 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences