CVE-2015-3411: Input Validation

Q: What is the severity of CVE-2015-3411?

CVE-2015-3411 is classified as a medium severity vulnerability due to the potential for remote file access.

Q: How do I fix CVE-2015-3411?

To fix CVE-2015-3411, upgrade PHP to versions 5.4.40, 5.5.24, or 5.6.8 and above.

Q: What impact does CVE-2015-3411 have on my application?

CVE-2015-3411 can allow attackers to read or write to arbitrary files, posing a risk of data exposure or manipulation.

Q: Which PHP versions are affected by CVE-2015-3411?

CVE-2015-3411 affects PHP versions before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8.

Q: Is CVE-2015-3411 exploited in the wild?

There have been reports of exploitation attempts for CVE-2015-3411, highlighting its relevance in real-world scenarios.

Published May 16, 2016

Updated

PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriteropenuri function, (3) the finfofile function, or (4) the hashhmacfile function, as demonstrated by a filename\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.

Affected Software

41 affected components

redhat Enterprise Linux=6.0

redhat Enterprise Linux=7.0

redhat Enterprise Linux Desktop=7.0

redhat Enterprise Linux Hpc Node=7.0

redhat Enterprise Linux Hpc Node Eus=7.1

redhat Enterprise Linux Server=7.0

redhat Enterprise Linux Server Eus=7.1

redhat Enterprise Linux Workstation=7.0

PHP PHP<=5.4.39

PHP PHP=5.5.0

PHP PHP=5.5.1

PHP PHP=5.5.2

PHP PHP=5.5.3

PHP PHP=5.5.4

PHP PHP=5.5.5

PHP PHP=5.5.6

PHP PHP=5.5.7

PHP PHP=5.5.8

PHP PHP=5.5.9

PHP PHP=5.5.10

PHP PHP=5.5.11

PHP PHP=5.5.12

PHP PHP=5.5.13

PHP PHP=5.5.14

PHP PHP=5.5.15

PHP PHP=5.5.16

PHP PHP=5.5.17

PHP PHP=5.5.18

PHP PHP=5.5.19

PHP PHP=5.5.20

PHP PHP=5.5.21

PHP PHP=5.5.22

PHP PHP=5.5.23

PHP PHP=5.6.0

PHP PHP=5.6.1

PHP PHP=5.6.2

PHP PHP=5.6.3

PHP PHP=5.6.4

PHP PHP=5.6.5

PHP PHP=5.6.6

PHP PHP=5.6.7

Event History

May 16, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-3411?

CVE-2015-3411 is classified as a medium severity vulnerability due to the potential for remote file access.

How do I fix CVE-2015-3411?

To fix CVE-2015-3411, upgrade PHP to versions 5.4.40, 5.5.24, or 5.6.8 and above.

What impact does CVE-2015-3411 have on my application?