CVE-2015-8865
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言；Fileinfo是其中的一个用于显示文件属性并支持批量修改其属性的组件。file是软件开发者Christos Zoulas所负责维护的一套用于类Unix系统下查看文件格式的工具。 PHP的Fileinfo组件中使用的file的funcs.c文件中的‘file_check_mem’函数存在安全漏洞，该漏洞源于程序没有正确处理continuation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2015-8865
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PHP Fileinfo组件file 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言；Fileinfo是其中的一个用于显示文件属性并支持批量修改其属性的组件。file是软件开发者Christos Zoulas所负责维护的一套用于类Unix系统下查看文件格式的工具。 PHP的Fileinfo组件中使用的file的funcs.c文件中的‘file_check_mem’函数存在安全漏洞，该漏洞源于程序没有正确处理continuation
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2015-8865
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-8865
请登录查看更多情报信息。
Patches & Fixes for CVE-2015-8865 (1)
-
https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36 x_refsource_CONFIRM
Vendor Advisories for CVE-2015-8865 (10)
-
https://support.apple.com/HT206567 x_refsource_CONFIRM
-
-
-
-
-
-
USN-2952-1: PHP vulnerabilities | Ubuntu security notices | Ubuntu vendor-advisory x_refsource_UBUNTU
-
-
-
Mailing List Discussions for CVE-2015-8865 (3)
-
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html vendor-advisory x_refsource_SUSE
-
http://lists.apple.com/archives/security-announce/2016/May/msg00004.html vendor-advisory x_refsource_APPLE
-
Other References for CVE-2015-8865 (6)
-
http://www.php.net/ChangeLog-7.php x_refsource_CONFIRM
-
https://bugs.php.net/bug.php?id=71527 x_refsource_CONFIRM
-
http://www.php.net/ChangeLog-5.php x_refsource_CONFIRM
-
http://bugs.gw.com/view.php?id=522 x_refsource_CONFIRM
Same Patch Batch · n/a · 2016-05-20 · 84 CVEs total
| CVE-2016-1833 | Apple iOS、watchOS、OS X El Capitan和tvOS libxml2 缓冲区错误漏洞 | |
| CVE-2016-1843 | Apple OS X El Capitan Messages 输入验证漏洞 | |
| CVE-2016-1830 | Apple iOS、watchOS、OS X El Capitan和tvOS kernel 缓冲区溢出漏洞 | |
| CVE-2016-1831 | Apple iOS和OS X El Capitan kernel 缓冲区溢出漏洞 | |
| CVE-2016-1829 | Apple iOS、watchOS、OS X El Capitan和tvOS kernel 缓冲区溢出漏洞 | |
| CVE-2016-1826 | Apple OS X El Capitan kernel 任意代码执行漏洞 | |
| CVE-2016-1825 | Apple OS X El Capitan IOHIDFamily 缓冲区溢出漏洞 | |
| CVE-2016-1824 | Apple iOS、watchOS、OS X El Capitan和tvOS IOHIDFamily 缓冲区溢出漏洞 | |
| CVE-2016-1823 | Apple iOS、watchOS、OS X El Capitan和tvOS IOHIDFamily 缓冲区溢出漏洞 | |
| CVE-2016-1827 | Apple iOS、watchOS、OS X El Capitan和tvOS kernel 缓冲区溢出漏洞 | |
| CVE-2016-1832 | Apple iOS、watchOS、OS X El Capitan和tvOS libc 缓冲区溢出漏洞 | |
| CVE-2016-1834 | Apple iOS、watchOS、OS X El Capitan和tvOS libxml2 缓冲区错误漏洞 | |
| CVE-2016-1835 | Apple iOS和OS X El Capitan libxml2 缓冲区错误漏洞 | |
| CVE-2016-1836 | Apple iOS、watchOS、OS X El Capitan和tvOS libxml2 缓冲区错误漏洞 | |
| CVE-2016-1837 | Apple iOS、watchOS、OS X El Capitan和tvOS libxml2 缓冲区错误漏洞 | |
| CVE-2016-1838 | Apple iOS、watchOS、OS X El Capitan和tvOS libxml2 缓冲区错误漏洞 | |
| CVE-2016-1839 | Apple iOS、watchOS、OS X El Capitan和tvOS libxml2 缓冲区错误漏洞 | |
| CVE-2016-1840 | Apple iOS、watchOS、OS X El Capitan和tvOS libxml2 缓冲区错误漏洞 | |
| CVE-2016-1841 | Apple iOS、watchOS、OS X El Capitan和tvOS libxslt 缓冲区溢出漏洞 | |
| CVE-2016-1842 | Apple iOS、watchOS和OS X El Capitan MapKit 信息泄露漏洞 |
Showing top 20 of 84 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2015-8865
No comments yet