CVE-2015-6836
The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (9.80%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.
- CVSS 3.0
- 7.3 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- EPSS
- 9.80% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- php/php
- Source
- security@opentext.com
References
- http://www.debian.org/security/2015/dsa-3358
- http://www.php.net/ChangeLog-5.php
- http://www.securityfocus.com/bid/76644
- http://www.securitytracker.com/id/1033548
- https://bugs.php.net/bug.php?id=70388
- https://security.gentoo.org/glsa/201606-10
- http://www.debian.org/security/2015/dsa-3358
- http://www.php.net/ChangeLog-5.php
- http://www.securityfocus.com/bid/76644
- http://www.securitytracker.com/id/1033548
- https://bugs.php.net/bug.php?id=70388
- https://security.gentoo.org/glsa/201606-10
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.