{"id":"CVE-2015-1351","aliases":["BELL-CVE-2015-1351","EUVD-2015-1490","GHSA-4p3m-vcw5-28gr","MGASA-2015-0090","RHSA-2015:1053","RHSA-2015:1066","SUSE-SU-2019:1746-1","UBUNTU-CVE-2015-1351","USN-2501-1","openSUSE-SU-2024:10290-1","openSUSE-SU-2024:10344-1","openSUSE-SU-2024:11169-1"],"status":"published","title":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the...","description":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.08314,"percentile":0.9497,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2015-01-26T00:00:00Z","modified":"2026-06-29T10:09:17Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.22-1.2.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"php-apc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.15-4.12.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pecl-zendopcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pecl-zendopcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pecl-zendopcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pecl-zendopcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.63.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.63.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.63.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.6"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.6"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.14-1.4"}]}],"bundled":70},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.28-1.1"}]}],"bundled":71},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-1.1"}]}],"bundled":97}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"oracle","product":"linux"},{"vendor":"oracle","product":"secure_backup"},{"vendor":"oracle","product":"solaris"},{"vendor":"php","product":"php"}],"references":[{"url":"http://www.securityfocus.com/bid/71929","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://openwall.com/lists/oss-security/2015/01/24/9","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://bugs.php.net/bug.php?id=68677","tags":["x_refsource_CONFIRM","x_transferred","Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://support.apple.com/HT205267","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1053.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201606-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1066.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1351","tags":["advisory"]},{"url":"http://git.php.net/?p=php-src.git;a=commit;h=777c39f4042327eac4b63c7ee87dc1c7a09a3115"},{"url":"https://github.com/advisories/GHSA-4p3m-vcw5-28gr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-1351","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0090.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15319","tags":["report"]},{"url":"http://php.net/ChangeLog-5.php#5.5.22","tags":["web"]},{"url":"http://www.ubuntu.com/usn/usn-2501-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1053","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1175718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1178736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1194730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1194737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1194747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1204868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1226916","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1053.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9427","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9705","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0231","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0232","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0273","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0273","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1351","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1351","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1352","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1352","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1352","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2348","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2787","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2787","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4148","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1222538","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4601","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4601","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4601","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1066","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223441","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1066.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2783","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3329","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3329","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3330","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3411","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3411","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3412","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232918","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4604","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4605","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8935","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191746-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1137633","tags":["report"]},{"url":"https://bugzilla.suse.com/1138172","tags":["report"]},{"url":"https://bugzilla.suse.com/1138173","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11040","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1351","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2501-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1352","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21706","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1351","description":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.","status":"published","published":"2015-03-30T10:00:00Z","modified":"2024-08-06T04:40:18.656Z","updated_at":"2026-11-02T14:35:43.698357Z"}],"euvd":[{"id":"EUVD-2015-1490","description":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.","status":"published","published":"2015-03-30T10:00:00Z","modified":"2024-08-06T04:40:18Z","updated_at":"2026-11-03T02:22:15.605684Z"}],"ghsa":[{"id":"GHSA-4p3m-vcw5-28gr","title":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the...","description":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.","status":"published","published":"2022-05-13T01:29:07Z","modified":"2025-04-12T12:46:39Z","cwes":["CWE-416"],"updated_at":"2026-11-02T15:01:20.846668Z"}],"nvd":[{"id":"CVE-2015-1351","description":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.","status":"published","published":"2015-03-30T10:59:07.867Z","modified":"2026-06-17T00:22:14.91Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:03:03.313464Z"}],"osv":[{"id":"BELL-CVE-2015-1351","title":"CVE-2015-1351 does not affect BellSoft software","status":"withdrawn","published":"2015-03-30T10:59:00Z","modified":"2026-01-28T07:21:38.465798Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"RHSA-2015:1066","title":"Red Hat Security Advisory: php54 security and bug fix update","status":"published","published":"2024-09-13T12:26:05Z","modified":"2026-06-29T10:09:17Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"MGASA-2015-0090","title":"Updated php packages fix security vulnerabilities","description":"Updated php packages fix security vulnerabilities:\n\nIt was discovered that the PHP opcache component incorrectly handled\nmemory. A remote attacker could possibly use this issue to cause PHP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode (CVE-2015-1351).\n\nIt was discovered that the PHP PostgreSQL database extension incorrectly\nhandled certain pointers. A remote attacker could possibly use this issue\nto cause PHP to crash, resulting in a denial of service, or possibly\nexecute arbitrary code (CVE-2015-1352).\n\nUse after free vulnerability in unserialize() with DateTimeZone in PHP before\n5.5.22 (CVE-2015-0273).\n\nPHP has been updated to version 5.5.22, which fixes these issues and other\nbugs.\n","status":"published","published":"2015-03-03T21:16:02Z","modified":"2026-04-16T06:25:09.842517477Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10290-1","title":"apache2-mod_php7-7.0.14-1.4 on GA media","description":"These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:03.261343Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10344-1","title":"apache2-mod_php5-5.6.28-1.1 on GA media","description":"These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:15.40421Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11169-1","title":"php8-8.0.11-1.1 on GA media","description":"These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:14:38.718583Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2015:1053","title":"Red Hat Security Advisory: php55 security and bug fix update","status":"published","published":"2024-09-13T10:36:11Z","modified":"2026-06-29T10:09:16Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2019:1746-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173).\n- CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in \n  iconv.c:_php_iconv_mime_decode() (bsc#1138172).    \n- CVE-2015-1351: Fixed a use after free in opcache extension (bsc#1137633).  \n","status":"published","published":"2019-07-04T09:36:26Z","modified":"2026-02-04T04:27:48.891409Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"UBUNTU-CVE-2015-1351","description":"Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.","status":"published","published":"2015-01-26T00:00:00Z","modified":"2026-04-22T10:02:32.576987Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2501-1","title":"php5 vulnerabilities","description":"Stefan Esser discovered that PHP incorrectly handled unserializing objects.\nA remote attacker could use this issue to cause PHP to crash, resulting in\na denial of service, or possibly execute arbitrary code. (CVE-2014-8142,\nCVE-2015-0231)\n\nBrian Carpenter discovered that the PHP CGI component incorrectly handled\ninvalid files. A local attacker could use this issue to obtain sensitive\ninformation, or possibly execute arbitrary code. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 14.10. (CVE-2014-9427)\n\nIt was discovered that PHP incorrectly handled certain pascal strings in\nthe fileinfo extension. A remote attacker could possibly use this issue to\ncause PHP to crash, resulting in a denial of service. This issue only\naffected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2014-9652)\n\nAlex Eubanks discovered that PHP incorrectly handled EXIF data in JPEG\nimages. A remote attacker could use this issue to cause PHP to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2015-0232)\n\nIt was discovered that the PHP opcache component incorrectly handled\nmemory. A remote attacker could possibly use this issue to cause PHP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10.\n(CVE-2015-1351)\n\nIt was discovered that the PHP PostgreSQL database extension incorrectly\nhandled certain pointers. A remote attacker could possibly use this issue\nto cause PHP to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS and\nUbuntu 14.10. (CVE-2015-1352)\n","status":"published","published":"2015-02-17T18:14:16Z","modified":"2026-04-22T09:08:18.321791Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}