CVE-2014-3515
The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 30.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 30.13% probability · 98th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- php/php · debian/debian linux
- Source
- secalert@redhat.com
EPSS 30.1% since 4 November 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.htmlMailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=141017844705317&w=2Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1765.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1766.htmlThird Party Advisory
- http://secunia.com/advisories/59794Third Party Advisory
- http://secunia.com/advisories/59831Third Party Advisory
- http://secunia.com/advisories/60998Third Party Advisory
- http://support.apple.com/kb/HT6443Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21683486Third Party Advisory
- http://www.debian.org/security/2014/dsa-2974Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlThird Party Advisory
- http://www.php.net/ChangeLog-5.phpVendor Advisory
- http://www.securityfocus.com/bid/68237Third Party Advisory, VDB Entry
- https://bugs.php.net/bug.php?id=67492Patch, Vendor Advisory
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.htmlMailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=141017844705317&w=2Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1765.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1766.htmlThird Party Advisory
- http://secunia.com/advisories/59794Third Party Advisory
- http://secunia.com/advisories/59831Third Party Advisory
- http://secunia.com/advisories/60998Third Party Advisory
- http://support.apple.com/kb/HT6443Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21683486Third Party Advisory
- http://www.debian.org/security/2014/dsa-2974Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlThird Party Advisory
- http://www.php.net/ChangeLog-5.phpVendor Advisory
- http://www.securityfocus.com/bid/68237Third Party Advisory, VDB Entry
- https://bugs.php.net/bug.php?id=67492Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.