CVE-2015-2783

CVE-2015-2783 is a buffer over-read vulnerability in PHP versions before 5.4.40, 5.5.24, and 5.6.8, affecting the phar extension and potentially impacting Apple and Red Hat systems. An unauthenticated remote attacker can exploit this by providing a crafted phar archive, leading to sensitive information disclosure from process memory or a denial of service due to an application crash. The vulnerability has a CVSS score of 5.8, indicating a medium severity with network access and medium attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.