VYPR
← All advisories
Medium severity5.9NVD Advisory· Published May 22, 2016· Updated May 6, 2026

CVE-2015-8878

CVE-2015-8878

Description

main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.

Affected products

1
  • PHP/PHP
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
    Range: >=5.5.0,<5.5.28

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.