Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2015-4643

31
FAUCET Score

CVE-2015-4643 is an integer overflow vulnerability in the ftp_genlist function within PHP versions before 5.4.42, 5.5.26, and 5.6.10, affecting products like Debian, Oracle, and Red Hat. This critical vulnerability (CVSS 9.8) allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow with high impact on confidentiality, integrity, and availability. While the vulnerability is critical and easily exploitable over the network without user interaction, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 5.4.42CPE matchmatch criteria
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
>= 5.5.0, < 5.5.26CPE matchmatch criteria
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
>= 5.6.0, < 5.6.10CPE matchmatch criteria
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
16.95%
Probability of exploitation in next 30 days
EPSS Percentile
96.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.1695 is in the 93rd percentile among its peer group of 36,833 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (19)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: php-0:5.3.3-46.el6_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: php-0:5.4.16-36.ael7b_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php55-php-0:5.5.21-4.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-php56-php-0:5.6.5-7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php54-php-0:5.4.40-3.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php55-php-0:5.5.21-4.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: rh-php56-php-0:5.6.5-7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php54-php-0:5.4.40-3.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php55-php-0:5.5.21-4.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: rh-php56-php-0:5.6.5-7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php54-php-0:5.4.40-3.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php55-php-0:5.5.21-4.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-php56-php-0:5.6.5-7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php54-php-0:5.4.40-3.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: php55-php-0:5.5.21-4.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: rh-php56-php-0:5.6.5-7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: php54-php-0:5.4.40-3.el7
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: php
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: php53

Vendor Advisories (1)

redhatCVE-2015-4643Moderate

php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)

Jun 11, 2015

References

git.php.net
openwall.com / lists/oss-security/2015/06/18/6
Mailing ListPatchThird Party Advisory
php.net / ChangeLog-5.php
Release NotesVendor Advisory
rhn.redhat.com / errata/RHSA-2015-1135.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2015-1186.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2015-1187.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2015-1218.html
Third Party Advisory
bugs.php.net / bug.php
ExploitIssue TrackingVendor Advisory
security.gentoo.org / glsa/201606-10
Third Party Advisory
debian.org / security/2015/dsa-3344
Third Party Advisory
oracle.com / technetwork/topics/security/linuxbulletinjan2016-2867209.html
Third Party Advisory
securityfocus.com / bid/75291
Third Party AdvisoryVDB Entry
securitytracker.com / id/1032709
Third Party AdvisoryVDB Entry