CVE-2015-0273: Use After Free

Q: What is the severity of CVE-2015-0273?

CVE-2015-0273 has a high severity rating due to the potential for remote code execution.

Q: How do I fix CVE-2015-0273?

To fix CVE-2015-0273, upgrade PHP to version 5.4.38, 5.5.22, or 5.6.6 or later.

Q: Which PHP versions are affected by CVE-2015-0273?

PHP versions before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 are affected by CVE-2015-0273.

Q: Can CVE-2015-0273 be exploited remotely?

Yes, CVE-2015-0273 can be exploited remotely through crafted serialized input.

Q: What type of vulnerability is CVE-2015-0273?

CVE-2015-0273 is classified as a use-after-free vulnerability in PHP.

Published Feb 20, 2015

Updated

Multiple use-after-free vulnerabilities in ext/date/phpdate.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the phpdatetimezoneinitializefromhash function or (b) DateTime data handled by the phpdateinitializefromhash function.

Other sources

Use after free vulnerability was reported in PHP DateTimeZone [1]. Upstream patches that fix this: http://git.php.net/?p=php-src.git;a=commit;h=c377f1a715476934133f3254d1e0d4bf3743e2d2 http://git.php.net/?p=php-src.git;a=commit;h=71335e6ebabc1b12c057d8017fd811892ecdfd24

[1]: https://bugs.php.net/bug.php?id=68942

— Red Hat

Affected Software

52 affected componentsFixes available

redhat/php<5.4.38

5.4.38

redhat/php<5.5.22

5.5.22

redhat/php<5.6.6

5.6.6

PHP PHP<=5.4.37

PHP PHP=5.5.0

PHP PHP=5.5.0-alpha1

PHP PHP=5.5.0-alpha2

PHP PHP=5.5.0-alpha3

PHP PHP=5.5.0-alpha4

PHP PHP=5.5.0-alpha5

PHP PHP=5.5.0-alpha6

PHP PHP=5.5.0-beta1

PHP PHP=5.5.0-beta2

PHP PHP=5.5.0-beta3

PHP PHP=5.5.0-beta4

PHP PHP=5.5.0-rc1

PHP PHP=5.5.0-rc2

PHP PHP=5.5.1

PHP PHP=5.5.2

PHP PHP=5.5.3

PHP PHP=5.5.4

PHP PHP=5.5.5

PHP PHP=5.5.6

PHP PHP=5.5.7

PHP PHP=5.5.8

PHP PHP=5.5.9

PHP PHP=5.5.10

PHP PHP=5.5.11

PHP PHP=5.5.12

PHP PHP=5.5.13

PHP PHP=5.5.14

PHP PHP=5.5.15

PHP PHP=5.5.16

PHP PHP=5.5.17

PHP PHP=5.5.18

PHP PHP=5.5.19

PHP PHP=5.5.20

PHP PHP=5.5.21

PHP PHP=5.6.0-alpha1

PHP PHP=5.6.0-alpha2

PHP PHP=5.6.0-alpha3

PHP PHP=5.6.0-alpha4

PHP PHP=5.6.0-alpha5

PHP PHP=5.6.0-beta1

PHP PHP=5.6.0-beta2

PHP PHP=5.6.0-beta3

PHP PHP=5.6.0-beta4

PHP PHP=5.6.1

PHP PHP=5.6.2

PHP PHP=5.6.3

PHP PHP=5.6.4

PHP PHP=5.6.5

Event History

Mar 30, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0273?

CVE-2015-0273 has a high severity rating due to the potential for remote code execution.

How do I fix CVE-2015-0273?