CVE-2015-8935

high-risk
Published 2016-08-07

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

Do I need to act?

~
1.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.1/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php
Php

Affected Vendors

Php

References (14)

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
http://rhn.redhat.com/errata/RHSA-2016-2750.html
Mailing List http://www.openwall.com/lists/oss-security/2016/06/20/3
Issue Tracking https://bugs.php.net/bug.php?id=68978
Issue Tracking https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w...
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
http://rhn.redhat.com/errata/RHSA-2016-2750.html
Mailing List http://www.openwall.com/lists/oss-security/2016/06/20/3
Issue Tracking https://bugs.php.net/bug.php?id=68978
Issue Tracking https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w...
51
/ 100
high-risk
Severity 23/34 · High
Exploitability 3/34 · Minimal
Exposure 25/34 · High