vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2015-2301

N/A
Published: March 30, 2015 at 10:00 AM UTC
Updated: June 17, 2026 at 12:23 AM UTC
11 products affected across 6 vendorsmacOSDebian LinuxUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 15%

Description

Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

macOS· Apple
95%
v ≤ 10.10.4
Ubuntu Linux· Canonicalrubygems
95%
10.0412.0414.0414.10
Debian Linux· Debiandrupal
95%
7.0
openSUSE· openSUSE
95%
13.113.2
PHP· PHPdrupal
95%
5.4.0 ≤ v < 5.4.405.5.0 ≤ v < 5.5.225.6.0 ≤ v < 5.6.6
Affected range stops below 5.4.40, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.5.22, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.6.6, so it looks safe — our inference, not a vendor statement
Enterprise Linux Desktop· Red Hatrubygems
95%
7.0
Enterprise Linux Hpc Node· Red Hat
95%
7.0
Enterprise Linux Hpc Node Eus· Red Hat
95%
7.1
Enterprise Linux Server· Red Hatrubygems
95%
7.0
Enterprise Linux Server Eus· Red Hatrubygems
95%
7.1

References (24)

x_refsource_CONFIRM
Source: [email protected]
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b
Vendor Advisoryx_refsource_APPLEMailing ListThird Party Advisory
Source: [email protected]
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html
Vendor Advisoryx_refsource_HPMailing ListThird Party Advisory
Source: [email protected]
http://marc.info/?l=bugtraq&m=143403519711434&w=2
Vendor Advisoryx_refsource_HPMailing ListThird Party Advisory
Source: [email protected]
http://marc.info/?l=bugtraq&m=143748090628601&w=2
Vendor Advisoryx_refsource_HPMailing ListThird Party Advisory
Source: [email protected]
http://marc.info/?l=bugtraq&m=144050155601375&w=2
Mailing Listx_refsource_MLISTExploit
Source: [email protected]
http://openwall.com/lists/oss-security/2015/03/15/6

CVSS

7.5HIGH[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card