Description

The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows remote attackers to execute arbitrary code by providing crafted serialized data with an unexpected data type, related to a "type confusion" issue.

References

• APPLE-APPLE-SA-2015-06-30-2
• APPLE-APPLE-SA-2015-08-13-2
• APPLE-APPLE-SA-2015-09-30-3
• APPLE-APPLE-SA-2015-10-21-4
• CVE-2014-9425
• CVE-2014-9705
• CVE-2014-9709
• CVE-2015-0232
• CVE-2015-0273
• CVE-2015-2301
• CVE-2015-2783
• CVE-2015-2787
• CVE-2015-3307
• CVE-2015-3329
• CVE-2015-3411
• CVE-2015-3412
• CVE-2015-4021
• CVE-2015-4022
• CVE-2015-4024
• CVE-2015-4026
• CVE-2015-4147
• CVE-2015-4148
• CVE-2015-4598
• CVE-2015-4599
• CVE-2015-4600
• CVE-2015-4601
• CVE-2015-4602
• CVE-2015-4603
• DEBIAN-DSA-3195
• DEBIAN-DSA-3198
• DEBIAN-DSA-3215
• DISA_SEVERITY-Category I
• DISA_VMSKEY-V0061337
• IAVM-2015-A-0199
• URL: http://oss.oracle.com/pipermail/el-errata/2015-July/005193.html

Solution

Related Vulnerabilities

• DSA-3198-1 php5 -- security update
• Oracle Solaris 11: CVE-2015-2301: Vulnerability in PHP
• PHP Vulnerability: CVE-2015-2783
• Alpine Linux: CVE-2015-2301: php issues fixed in 5.6.6
• Alpine Linux: CVE-2015-0232: php multiple fixes
• USN-2501-1: PHP vulnerabilities
• RHSA-2015:1066: php54 security and bug fix update
• Alpine Linux: CVE-2015-4022: php multiple issues
• OS X update for apache (CVE-2015-3329)
• Gentoo Linux: CVE-2015-0273: PHP: Multiple vulnerabilities
• Gentoo Linux: CVE-2015-2301: PHP: Multiple vulnerabilities
• OS X update for apache_mod_php (CVE-2015-2787)
• OS X update for apache_mod_php (CVE-2015-0232)
• Oracle Solaris 11: CVE-2015-4026: Vulnerability in PHP
• PHP Vulnerability: CVE-2015-4600
• PHP Vulnerability: CVE-2015-3307
• OS X update for apache_mod_php (CVE-2015-3329)
• Gentoo Linux: CVE-2015-4147: PHP: Multiple vulnerabilities
• ELSA-2015-1053 Moderate: Oracle Linux Software Collections 1.2 for Oracle Linux php55 security and bug fix update
• PHP Vulnerability: CVE-2015-4147
• Gentoo Linux: CVE-2015-4148: PHP: Multiple vulnerabilities
• OS X update for apache_mod_php (CVE-2014-9705)
• Gentoo Linux: CVE-2015-0232: PHP: Multiple vulnerabilities
• Oracle Solaris 11: CVE-2015-0273: Vulnerability in PHP
• HP-UX: CVE-2015-2301: Apache Server Suite running Apache Tomcat or PHP, Remote Denial of Service (DoS) and Other Vulnerabilities
• PHP Vulnerability: CVE-2015-4599
• HP-UX: CVE-2014-9709: Apache Server Suite running Apache Tomcat or PHP, Remote Denial of Service (DoS) and Other Vulnerabilities
• DSA-3344-1 php5 -- security update
• OS X update for apache_mod_php (CVE-2014-9709)
• Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 5
• Amazon Linux AMI: Security patch for php54 (ALAS-2015-509) (multiple CVEs)
• Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 7
• PHP Vulnerability: CVE-2014-9705
• Amazon Linux AMI: Security patch for php55 (ALAS-2015-474) (multiple CVEs)
• Oracle Solaris 11: CVE-2015-2787: Vulnerability in PHP
• OS X update for apache_mod_php (CVE-2015-4148)
• Amazon Linux AMI: Security patch for php54 (ALAS-2015-475) (multiple CVEs)
• PHP Vulnerability: CVE-2015-4148
• OS X update for apache (CVE-2015-4147)
• PHP Vulnerability: CVE-2015-4598
• USN-2535-1: PHP vulnerabilities
• FreeBSD: php5 -- multiple vulnerabilities (Multiple CVEs)
• Gentoo Linux: CVE-2015-2783: PHP: Multiple vulnerabilities
• PHP Vulnerability: CVE-2015-4021
• OS X update for apache_mod_php (CVE-2015-2783)
• PHP Vulnerability: CVE-2014-9709
• Alpine Linux: CVE-2015-4021: php multiple issues
• OS X update for apache_mod_php (CVE-2015-4147)
• OS X update for apache (CVE-2015-2787)
• OS X update for apache (CVE-2015-4026)
• OS X update for apache_mod_php (CVE-2015-4021)
• OS X update for Admin Framework (CVE-2015-0273)
• OS X update for apache_mod_php (CVE-2015-0273)
• OS X update for apache_mod_php (CVE-2015-4024)
• Oracle Solaris 11: CVE-2015-4022: Vulnerability in PHP
• RHSA-2015:1135: php security and bug fix update
• PHP Vulnerability: CVE-2015-2787
• PHP Vulnerability: CVE-2015-4026
• OS X update for apache_mod_php (CVE-2015-3307)
• OS X update for apache_mod_php (CVE-2015-4022)
• Oracle Solaris 11: CVE-2015-2783: Vulnerability in PHP
• Gentoo Linux: CVE-2015-2787: PHP: Multiple vulnerabilities
• OS X update for apache (CVE-2015-3307)
• Amazon Linux AMI: Security patch for php54 (ALAS-2015-493) (multiple CVEs)
• Oracle Solaris 11: CVE-2015-3329: Vulnerability in PHP
• PHP Vulnerability: CVE-2015-2301
• Alpine Linux: CVE-2015-4024: php multiple issues
• PHP Vulnerability: CVE-2015-4603
• RHSA-2015:1186: php55-php security update
• Amazon Linux AMI: Security patch for php54 (ALAS-2015-534) (multiple CVEs)
• OS X update for apache (CVE-2015-4148)
• ELSA-2015-1066 Important: Oracle Linux Software Collections 1.2 for Oracle Linux php54 security and bug fix update
• Oracle Solaris 11: CVE-2014-9705: Vulnerability in PHP
• Gentoo Linux: CVE-2014-9709: GD: Multiple vulnerabilities
• OS X update for apache_mod_php (CVE-2015-4026)
• Juniper Junos OS: 2017-07 Security Bulletin: Junos OS: J-Web: Multiple Vulnerabilities in PHP software (JSA10804) (multiple CVEs)
• Amazon Linux AMI: Security patch for php56 (ALAS-2015-511) (multiple CVEs)
• Gentoo Linux: CVE-2014-9705: PHP: Multiple vulnerabilities
• USN-2572-1: PHP vulnerabilities
• Gentoo Linux: CVE-2014-9425: PHP: Multiple vulnerabilities
• Oracle Solaris 11: CVE-2015-4024: Vulnerability in PHP
• Amazon Linux AMI: Security patch for php55 (ALAS-2015-535) (multiple CVEs)
• DSA-3215-1 libgd2 -- security update
• RHSA-2015:1187: rh-php56-php security update
• Oracle Solaris 11: CVE-2015-0232: Vulnerability in PHP
• PHP Vulnerability: CVE-2015-0232
• RHSA-2015:1218: php security update
• Alpine Linux: CVE-2015-4026: php multiple issues
• Oracle Solaris 11: CVE-2015-4021: Vulnerability in PHP
• Alpine Linux: CVE-2014-9705: php issues fixed in 5.6.6
• PHP Vulnerability: CVE-2015-3329
• Oracle Solaris 11: CVE-2014-9709: Vulnerability in GD2 Graphics Draw Library, PHP
• PHP Vulnerability: CVE-2015-0273
• Amazon Linux AMI: Security patch for php55 (ALAS-2015-494) (multiple CVEs)
• DSA-3280-1 php5 -- security update
• OS X update for apache (CVE-2015-0273)
• DSA-3195-1 php5 -- security update
• PHP Vulnerability: CVE-2015-3411
• PHP Vulnerability: CVE-2015-4602
• PHP Vulnerability: CVE-2015-4024