CVE-2015-4643

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.

• CWE-119

• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0765623d6991b62ffcd93ddb6be8a5203a2fa7e2
• http://openwall.com/lists/oss-security/2015/06/18/6Mailing List, Patch, Third Party Advisory
• http://php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1135.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1186.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1187.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1218.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3344Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
• http://www.securityfocus.com/bid/75291Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032709Third Party Advisory, VDB Entry
• https://bugs.php.net/bug.php?id=69545Exploit, Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201606-10Third Party Advisory
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0765623d6991b62ffcd93ddb6be8a5203a2fa7e2
• http://openwall.com/lists/oss-security/2015/06/18/6Mailing List, Patch, Third Party Advisory
• http://php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1135.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1186.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1187.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1218.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3344Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
• http://www.securityfocus.com/bid/75291Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032709Third Party Advisory, VDB Entry
• https://bugs.php.net/bug.php?id=69545Exploit, Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201606-10Third Party Advisory

Published

May 16, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4637The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 …
• CVE-2015-4638The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analyt…
• CVE-2015-4639Cross-site scripting (XSS) vulnerability in opac-addbybiblio…
• CVE-2015-4640The SwiftKey language-pack update implementation on Samsung …
• CVE-2015-4641Directory traversal vulnerability in the SwiftKey language-p…
• CVE-2015-4642The escapeshellarg function in ext/standard/exec.c in PHP be…
• CVE-2015-4644The php_pgsql_meta_data function in pgsql.c in the PostgreSQ…
• CVE-2015-4645Integer overflow in the read_fragment_table_4 function in un…5.5
• CVE-2015-4646(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4…7.5
• CVE-2015-4647Multiple stack-based buffer overflows in Ipropsapi in Panaso…
• CVE-2015-4648Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1…
• CVE-2015-4649Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5…