{"id":"CVE-2015-6834","url":"https://www.cyber-defence.io/tools/cve/CVE-2015-6834","generatedAt":"2026-11-05T05:27:56.284Z","title":"Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3)…","description":"Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.","published":"2016-05-16T10:59:18.000Z","lastModified":"2026-06-17T00:31:30.000Z","status":"Modified","sourceIdentifier":"security@opentext.com","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["php/php"],"epss":{"score":0.46801,"percentile":0.98829,"date":"2026-11-04","history":[{"date":"2026-09-21","score":0.4261,"percentile":0.98689},{"date":"2026-09-22","score":0.46801,"percentile":0.98772}]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2015-09-09","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":38122,"kind":"exploit","title":"PHP 5.4/5.5/5.6 - SplObjectStorage 'Unserialize()' Use-After-Free","url":"https://www.exploit-db.com/exploits/38122","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/38122.txt","file":"exploits/php/dos/38122.txt","published":"2015-09-09","added":"2015-09-09","updated":"2016-12-01","author":"Taoguang Chen","type":"dos","platform":"php","port":null,"verified":true,"codes":["CVE-2015-6834","OSVDB-126951"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":38120,"kind":"exploit","title":"PHP 5.4/5.5/5.6 - SplDoublyLinkedList 'Unserialize()' Use-After-Free","url":"https://www.exploit-db.com/exploits/38120","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/38120.txt","file":"exploits/php/dos/38120.txt","published":"2015-09-09","added":"2015-09-09","updated":"2016-12-01","author":"Taoguang Chen","type":"dos","platform":"php","port":null,"verified":true,"codes":["CVE-2015-6834","OSVDB-126954"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 46.8%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://php.net/ChangeLog-5.php","source":"security@opentext.com"},{"url":"http://www.debian.org/security/2015/dsa-3358","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/76649","source":"security@opentext.com"},{"url":"http://www.securitytracker.com/id/1033548","source":"security@opentext.com"},{"url":"https://bugs.php.net/bug.php?id=70172","source":"security@opentext.com"},{"url":"https://bugs.php.net/bug.php?id=70365","source":"security@opentext.com"},{"url":"https://bugs.php.net/bug.php?id=70366","source":"security@opentext.com"},{"url":"https://security.gentoo.org/glsa/201606-10","source":"security@opentext.com"},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/76649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=70172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=70365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=70366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-10","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-6834","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}