Vulnerability Details CVE-2015-8878
main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.5%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 7.1
References
Products affected by CVE-2015-8878
-
cpe:2.3:a:php:php:5.5.0
-
cpe:2.3:a:php:php:5.5.1
-
cpe:2.3:a:php:php:5.5.10
-
cpe:2.3:a:php:php:5.5.11
-
cpe:2.3:a:php:php:5.5.12
-
cpe:2.3:a:php:php:5.5.13
-
cpe:2.3:a:php:php:5.5.14
-
cpe:2.3:a:php:php:5.5.15
-
cpe:2.3:a:php:php:5.5.16
-
cpe:2.3:a:php:php:5.5.17
-
cpe:2.3:a:php:php:5.5.18
-
cpe:2.3:a:php:php:5.5.19
-
cpe:2.3:a:php:php:5.5.2
-
cpe:2.3:a:php:php:5.5.20
-
cpe:2.3:a:php:php:5.5.21
-
cpe:2.3:a:php:php:5.5.22
-
cpe:2.3:a:php:php:5.5.23
-
cpe:2.3:a:php:php:5.5.24
-
cpe:2.3:a:php:php:5.5.25
-
cpe:2.3:a:php:php:5.5.26
-
cpe:2.3:a:php:php:5.5.27
-
cpe:2.3:a:php:php:5.5.3
-
cpe:2.3:a:php:php:5.5.4
-
cpe:2.3:a:php:php:5.5.5
-
cpe:2.3:a:php:php:5.5.6
-
cpe:2.3:a:php:php:5.5.7
-
cpe:2.3:a:php:php:5.5.8
-
cpe:2.3:a:php:php:5.5.9
-
cpe:2.3:a:php:php:5.6.0
-
cpe:2.3:a:php:php:5.6.1
-
cpe:2.3:a:php:php:5.6.10
-
cpe:2.3:a:php:php:5.6.11
-
cpe:2.3:a:php:php:5.6.2
-
cpe:2.3:a:php:php:5.6.3
-
cpe:2.3:a:php:php:5.6.4
-
cpe:2.3:a:php:php:5.6.5
-
cpe:2.3:a:php:php:5.6.6
-
cpe:2.3:a:php:php:5.6.7
-
cpe:2.3:a:php:php:5.6.8
-
cpe:2.3:a:php:php:5.6.9