CVE-2015-8865: Buffer Overflow
Published May 20, 2016
·Updated
Fixed bug (Buffer over-write in finfoopen with malformed magic file). (CVE-2015-8865)
Other sources
The filecheckmem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file.
— Launchpad
Affected Software
37 affected componentsFixes available
PHP PHP<=5.5.33
PHP PHP=5.6.0-alpha1
PHP PHP=5.6.0-alpha2
PHP PHP=5.6.0-alpha3
PHP PHP=5.6.0-alpha4
PHP PHP=5.6.0-alpha5
PHP PHP=5.6.0-beta1
PHP PHP=5.6.0-beta2
PHP PHP=5.6.0-beta3
PHP PHP=5.6.0-beta4
PHP PHP=5.6.1
PHP PHP=5.6.2
PHP PHP=5.6.3
PHP PHP=5.6.4
PHP PHP=5.6.5
PHP PHP=5.6.6
PHP PHP=5.6.7
PHP PHP=5.6.8
PHP PHP=5.6.9
PHP PHP=5.6.10
PHP PHP=5.6.11
PHP PHP=5.6.12
PHP PHP=5.6.13
PHP PHP=5.6.14
PHP PHP=5.6.15
PHP PHP=5.6.16
PHP PHP=5.6.17
PHP PHP=5.6.18
PHP PHP=5.6.19
PHP PHP=7.0.0
PHP PHP=7.0.1
PHP PHP=7.0.2
PHP PHP=7.0.3
PHP PHP=7.0.4
Apple iOS and macOS<=10.11.4
PHP PHP<7.0.5
7.0.5
debian/file
1:5.39-3+deb11u11:5.44-31:5.46-5
Remediation
Event History
May 20, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Feb 18, 2026
Data Sourced
via Ubuntu·09:09 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·09:10 PM
DescriptionAffected Software
Data Sourced
via Launchpad·09:10 PM
Description