CVE-2015-4021

The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.

• How can I get the fixes?
• What do statuses mean?
• Patch details

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-2658-1
• PHP vulnerabilities
• 6 July 2015

Other references

• http://www.openwall.com/lists/oss-security/2015/05/17/2
• http://www.openwall.com/lists/oss-security/2015/05/18/2
• https://www.cve.org/CVERecord?id=CVE-2015-4021