CVE-2014-9767

moderate-risk

Published 2016-05-22

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

Do I need to act?

-

0.49% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

4

CVSS 4.3/10 Medium

NETWORK / LOW complexity

Affected Products (20)

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Php

Affected Vendors

Hiphop Virtual Machine For Php Project Php

References (28)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html

http://php.net/ChangeLog-5.php

http://rhn.redhat.com/errata/RHSA-2016-2750.html

http://www.openwall.com/lists/oss-security/2016/03/16/20

http://www.securityfocus.com/bid/76652

http://www.securitytracker.com/id/1035311

http://www.ubuntu.com/usn/USN-2952-1

http://www.ubuntu.com/usn/USN-2952-2

Exploit https://bugs.php.net/bug.php?id=67996

Exploit https://bugs.php.net/bug.php?id=70350

https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html

http://php.net/ChangeLog-5.php

http://rhn.redhat.com/errata/RHSA-2016-2750.html

and 8 more references

44

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 2/34 · Minimal

Exposure 24/34 · High