CVE-2015-4026: High severity red hat enterprise linux vulnerability

Q: What is the severity of CVE-2015-4026?

CVE-2015-4026 is considered a critical vulnerability due to its potential to allow remote code execution.

Q: How do I fix CVE-2015-4026?

To fix CVE-2015-4026, update PHP to version 5.4.41 or later, 5.5.25 or later, or 5.6.9 or later.

Q: What versions of PHP are affected by CVE-2015-4026?

CVE-2015-4026 affects PHP versions prior to 5.4.41, all 5.5.x before 5.5.25, and all 5.6.x before 5.6.9.

Q: Can CVE-2015-4026 be exploited remotely?

Yes, CVE-2015-4026 can be exploited remotely by attackers to bypass extension restrictions.

Q: Is CVE-2015-4026 specific to certain operating systems?

CVE-2015-4026 is specifically noted in the context of multiple operating systems that use vulnerable versions of PHP.

Published Jun 9, 2015

Updated

The pcntlexec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.

Affected Software

61 affected components

redhat Enterprise Linux=6.0

redhat Enterprise Linux=7.0

PHP PHP<=5.4.40

PHP PHP=5.4.39

PHP PHP=5.5.0

PHP PHP=5.5.0-alpha1

PHP PHP=5.5.0-alpha2

PHP PHP=5.5.0-alpha3

PHP PHP=5.5.0-alpha4

PHP PHP=5.5.0-alpha5

PHP PHP=5.5.0-alpha6

PHP PHP=5.5.0-beta1

PHP PHP=5.5.0-beta2

PHP PHP=5.5.0-beta3

PHP PHP=5.5.0-beta4

PHP PHP=5.5.0-rc1

PHP PHP=5.5.0-rc2

PHP PHP=5.5.1

PHP PHP=5.5.2

PHP PHP=5.5.3

PHP PHP=5.5.4

PHP PHP=5.5.5

PHP PHP=5.5.6

PHP PHP=5.5.7

PHP PHP=5.5.8

PHP PHP=5.5.9

PHP PHP=5.5.10

PHP PHP=5.5.11

PHP PHP=5.5.12

PHP PHP=5.5.13

PHP PHP=5.5.14

PHP PHP=5.5.18

PHP PHP=5.5.19

PHP PHP=5.5.20

PHP PHP=5.5.21

PHP PHP=5.5.22

PHP PHP=5.5.23

PHP PHP=5.5.24

PHP PHP=5.6.0-alpha1

PHP PHP=5.6.0-alpha2

PHP PHP=5.6.0-alpha3

PHP PHP=5.6.0-alpha4

PHP PHP=5.6.0-alpha5

PHP PHP=5.6.0-beta1

PHP PHP=5.6.0-beta2

PHP PHP=5.6.0-beta3

PHP PHP=5.6.0-beta4

PHP PHP=5.6.2

PHP PHP=5.6.3

PHP PHP=5.6.4

PHP PHP=5.6.5

PHP PHP=5.6.6

PHP PHP=5.6.7

PHP PHP=5.6.8

Apple iOS and macOS<=10.10.4

redhat Enterprise Linux Desktop=7.0

redhat Enterprise Linux Hpc Node=7.0

redhat Enterprise Linux Hpc Node Eus=7.1

redhat Enterprise Linux Server=7.0

redhat Enterprise Linux Server Eus=7.1

redhat Enterprise Linux Workstation=7.0

Remediation

Patch Available

http://php.net/ChangeLog-5.php

Patch Available

https://bugs.php.net/bug.php?id=68598

Event History

Jun 9, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4026?

CVE-2015-4026 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2015-4026?

To fix CVE-2015-4026, update PHP to version 5.4.41 or later, 5.5.25 or later, or 5.6.9 or later.

What versions of PHP are affected by CVE-2015-4026?

CVE-2015-4026 affects PHP versions prior to 5.4.41, all 5.5.x before 5.5.25, and all 5.6.x before 5.6.9.

Can CVE-2015-4026 be exploited remotely?

Yes, CVE-2015-4026 can be exploited remotely by attackers to bypass extension restrictions.

Is CVE-2015-4026 specific to certain operating systems?

CVE-2015-4026 is specifically noted in the context of multiple operating systems that use vulnerable versions of PHP.

CVE-2015-4026: High severity red hat enterprise linux vulnerability

Affected Software

Remediation

Patch Available

Patch Available

Event History

Frequently Asked Questions

What is the severity of CVE-2015-4026?

How do I fix CVE-2015-4026?

What versions of PHP are affected by CVE-2015-4026?

Can CVE-2015-4026 be exploited remotely?

Is CVE-2015-4026 specific to certain operating systems?

Company

Resources

Contact