CVE-2015-8873

High

Published: 16/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2015-8873 describes a stack consumption vulnerability in zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12. This allows remote attackers to cause a segmentation fault via recursive method calls.

Risk Assessment

Attackers can exploit this vulnerability to cause a denial of service, leading to application unavailability. This may affect the organization's operational continuity and user trust.

Recommendation

It is recommended to update PHP to the latest version to mitigate this vulnerability. Additionally, applications should be monitored for unauthorized attempts to invoke recursive methods.

Other vulnerabilities in PHP (zend_exceptions.c)

CVE-2016-7478High
In PHP, in the zend_exceptions.c file, there is a vulnerability that allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data. This affects versions 5.x before 5.6.28 and 7.x before 7.0.13.

Original NVD description (English source)

Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service (segmentation fault) via recursive method calls.