CVE-2015-8878 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-8878 Interim 1 14 2023-02-15T01:44:45Z current 2021-05-30T13:36:17Z 2023-02-15T01:44:45Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-8878 main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 apache2-mod_php5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-devel php5-dom php5-enchant php5-exif php5-fastcgi php5-fileinfo php5-fpm php5-ftp php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-intl php5-json php5-ldap php5-mbstring php5-mcrypt php5-mysql php5-odbc php5-opcache php5-openssl php5-pcntl php5-pdo php5-pear php5-pgsql php5-phar php5-posix php5-pspell php5-shmop php5-snmp php5-soap php5-sockets php5-sqlite php5-suhosin php5-sysvmsg php5-sysvsem php5-sysvshm php5-tokenizer php5-wddx php5-xmlreader php5-xmlrpc php5-xmlwriter php5-xsl php5-zip php5-zlib apache2-mod_php5 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bcmath as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bz2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-calendar as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ctype as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-curl as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dba as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dom as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-enchant as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-exif as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fastcgi as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fileinfo as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fpm as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ftp as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gd as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gettext as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gmp as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-iconv as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-imap as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-intl as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-json as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ldap as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mbstring as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mcrypt as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mysql as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-odbc as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-opcache as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-openssl as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pcntl as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pdo as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pear as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pgsql as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-phar as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-posix as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pspell as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-shmop as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-snmp as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-soap as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sockets as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sqlite as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-suhosin as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvmsg as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvsem as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvshm as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-tokenizer as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-wddx as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlreader as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlrpc as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlwriter as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xsl as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zip as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zlib as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-devel as a component of SUSE Linux Enterprise Software Development Kit 12 php5 as a component of SUSE Linux Enterprise Software Development Kit 12 php5-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 php5 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses. CVE-2015-8878 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5 SUSE Linux Enterprise Module for Web and Scripting 12:php5 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl SUSE Linux Enterprise Module for Web and Scripting 12:php5-json SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib SUSE Linux Enterprise Software Development Kit 12 SP1:php5 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel SUSE Linux Enterprise Software Development Kit 12:php5 SUSE Linux Enterprise Software Development Kit 12:php5-devel critical 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H