Back to Database
Status published
High
CVE-2015-4022
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP...
Vulnerability Description
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-4022
Credits & Attribution
No credits recorded in the NVD database.
References
- http://rhn.redhat.com/errata/RHSA-2015-1187.html
- https://bugs.php.net/bug.php?id=69545
- http://rhn.redhat.com/errata/RHSA-2015-1186.html
- http://rhn.redhat.com/errata/RHSA-2015-1219.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html
- http://php.net/ChangeLog-5.php
- http://www.debian.org/security/2015/dsa-3280
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
- http://www.securitytracker.com/id/1032433
- http://rhn.redhat.com/errata/RHSA-2015-1135.html
- http://www.securityfocus.com/bid/74902
- https://support.apple.com/kb/HT205031
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html
- https://security.gentoo.org/glsa/201606-10
- http://rhn.redhat.com/errata/RHSA-2015-1218.html
More from redhat
View All →CVE-2021-41411
drools <=7.59.x is affected by an XML External Entity (XXE)...
Critical
9.8
CVE-2020-8991
vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to...
Low
2.3
CVE-2020-12685
XSS in the admin help system admin/help.html and admin/quicklinks.html in...
Medium
6.1
CVE-2020-12430
An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt...
Medium
6.5
CVE-2019-7628
Pagure 5.2 leaks API keys by e-mailing them to users....
Medium
5.9
Affected Vendor
redhat
View all reports →Affected Software
enterprise linux desktop, enterprise linux hpc node, enterprise linux hpc node eus, enterprise linux server, enterprise linux server eus, enterprise linux workstation, php, enterprise linux, mac os x
Vulnerable Versions:
7.0, 7.1, 0, 5.4.39, 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9, 5.5.10, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.18, 5.5.19, 5.5.20, 5.5.21, 5.5.22, 5.5.23, 5.5.24, 5.6.0, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8, 6.0
Timeline
Official Publish:
June 9th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.