CVE-2015-3211

php-fpm allows local users to write to or create arbitrary files via a symlink attack.

• CWE-59

• https://bugzilla.redhat.com/show_bug.cgi?id=1228721Issue Tracking, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1228721Issue Tracking, Third Party Advisory, VDB Entry

Published

Aug 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3205libmimedir allows remote attackers to execute arbitrary code…
• CVE-2015-3206The checkPassword function in python-kerberos does not authe…
• CVE-2015-3207In Openshift Origin 3 the cookies being set in console have …5.3
• CVE-2015-3208Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-3209Heap-based buffer overflow in the PCNET controller in QEMU a…
• CVE-2015-3210Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCR…9.8
• CVE-2015-3212Race condition in net/sctp/socket.c in the Linux kernel befo…
• CVE-2015-3213The gesture handling code in Clutter before 1.16.2 allows ph…
• CVE-2015-3214The pit_ioport_read in i8254.c in the Linux kernel before 2.…
• CVE-2015-3215The NetKVM Windows Virtio driver allows remote attackers to …
• CVE-2015-3216Race condition in a certain Red Hat patch to the PRNG lock i…
• CVE-2015-3217PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle gr…