CVE-2014-3515

HIGH 7.5CVE-2014-3515 · Published 09/07/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
php php	`≥ 5.4.0, < 5.4.30≥ 5.5.0, < 5.5.14< 5.3.29`	`5.4.305.5.145.3.29`

Description

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

References

git.php.net
lists.opensuse.org/opensuse-updates/2014-09/msg00046.html · Mailing List
marc.info · Mailing List
rhn.redhat.com/errata/RHSA-2014-1765.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-1766.html · Third Party Advisory
secunia.com/advisories/59794 · Third Party Advisory
secunia.com/advisories/59831 · Third Party Advisory
secunia.com/advisories/60998 · Third Party Advisory
support.apple.com/kb/HT6443 · Third Party Advisory
www-01.ibm.com/support/docview.wss · Third Party Advisory
debian.org/security/2014/dsa-2974 · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html · Third Party Advisory
php.net/ChangeLog-5.php · Vendor Advisory
securityfocus.com/bid/68237 · Third Party Advisory
bugs.php.net/bug.php · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free