Vulnerability Details CVE-2015-8876
Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.126
EPSS Ranking 93.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2015-8876
-
cpe:2.3:a:php:php:5.4.0
-
cpe:2.3:a:php:php:5.4.1
-
cpe:2.3:a:php:php:5.4.10
-
cpe:2.3:a:php:php:5.4.11
-
cpe:2.3:a:php:php:5.4.12
-
cpe:2.3:a:php:php:5.4.13
-
cpe:2.3:a:php:php:5.4.14
-
cpe:2.3:a:php:php:5.4.15
-
cpe:2.3:a:php:php:5.4.16
-
cpe:2.3:a:php:php:5.4.17
-
cpe:2.3:a:php:php:5.4.18
-
cpe:2.3:a:php:php:5.4.19
-
cpe:2.3:a:php:php:5.4.2
-
cpe:2.3:a:php:php:5.4.20
-
cpe:2.3:a:php:php:5.4.21
-
cpe:2.3:a:php:php:5.4.22
-
cpe:2.3:a:php:php:5.4.23
-
cpe:2.3:a:php:php:5.4.24
-
cpe:2.3:a:php:php:5.4.25
-
cpe:2.3:a:php:php:5.4.26
-
cpe:2.3:a:php:php:5.4.27
-
cpe:2.3:a:php:php:5.4.28
-
cpe:2.3:a:php:php:5.4.29
-
cpe:2.3:a:php:php:5.4.3
-
cpe:2.3:a:php:php:5.4.30
-
cpe:2.3:a:php:php:5.4.31
-
cpe:2.3:a:php:php:5.4.32
-
cpe:2.3:a:php:php:5.4.33
-
cpe:2.3:a:php:php:5.4.34
-
cpe:2.3:a:php:php:5.4.35
-
cpe:2.3:a:php:php:5.4.36
-
cpe:2.3:a:php:php:5.4.37
-
cpe:2.3:a:php:php:5.4.38
-
cpe:2.3:a:php:php:5.4.39
-
cpe:2.3:a:php:php:5.4.4
-
cpe:2.3:a:php:php:5.4.40
-
cpe:2.3:a:php:php:5.4.41
-
cpe:2.3:a:php:php:5.4.42
-
cpe:2.3:a:php:php:5.4.43
-
cpe:2.3:a:php:php:5.4.5
-
cpe:2.3:a:php:php:5.4.6
-
cpe:2.3:a:php:php:5.4.7
-
cpe:2.3:a:php:php:5.4.8
-
cpe:2.3:a:php:php:5.4.9
-
cpe:2.3:a:php:php:5.5.0
-
cpe:2.3:a:php:php:5.5.1
-
cpe:2.3:a:php:php:5.5.10
-
cpe:2.3:a:php:php:5.5.11
-
cpe:2.3:a:php:php:5.5.12
-
cpe:2.3:a:php:php:5.5.13
-
cpe:2.3:a:php:php:5.5.14
-
cpe:2.3:a:php:php:5.5.15
-
cpe:2.3:a:php:php:5.5.16
-
cpe:2.3:a:php:php:5.5.17
-
cpe:2.3:a:php:php:5.5.18
-
cpe:2.3:a:php:php:5.5.19
-
cpe:2.3:a:php:php:5.5.2
-
cpe:2.3:a:php:php:5.5.20
-
cpe:2.3:a:php:php:5.5.21
-
cpe:2.3:a:php:php:5.5.22
-
cpe:2.3:a:php:php:5.5.23
-
cpe:2.3:a:php:php:5.5.24
-
cpe:2.3:a:php:php:5.5.25
-
cpe:2.3:a:php:php:5.5.26
-
cpe:2.3:a:php:php:5.5.27
-
cpe:2.3:a:php:php:5.5.3
-
cpe:2.3:a:php:php:5.5.4
-
cpe:2.3:a:php:php:5.5.5
-
cpe:2.3:a:php:php:5.5.6
-
cpe:2.3:a:php:php:5.5.7
-
cpe:2.3:a:php:php:5.5.8
-
cpe:2.3:a:php:php:5.5.9
-
cpe:2.3:a:php:php:5.6.0
-
cpe:2.3:a:php:php:5.6.1
-
cpe:2.3:a:php:php:5.6.10
-
cpe:2.3:a:php:php:5.6.11
-
cpe:2.3:a:php:php:5.6.2
-
cpe:2.3:a:php:php:5.6.3
-
cpe:2.3:a:php:php:5.6.4
-
cpe:2.3:a:php:php:5.6.5
-
cpe:2.3:a:php:php:5.6.6
-
cpe:2.3:a:php:php:5.6.7
-
cpe:2.3:a:php:php:5.6.8
-
cpe:2.3:a:php:php:5.6.9