HTTP: PHP Core Unserialize Process Nested Data Use After Free
This signature detects attempts to exploit a use After Free vulnerability against PHP Core. A successful attack will result in remote code execution under the context of the service running the PHP service.
Extended Description
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.
Affected Products
Php php
References
CVE: CVE-2015-0231
Short Name
HTTP:PHP:PHP-CORE-UAF
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
After CVE-2014-8142 CVE-2015-0231 Core Data Free Nested PHP Process Unserialize Use
Release Date
02/02/2015
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3797
False Positive
Unknown
Vendors
Php
CVSS Score
7.5