{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"critical"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2023 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2015-8878","title":"Title"},{"category":"description","text":"main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2015-8878","url":"https://www.suse.com/security/cve/CVE-2015-8878"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 981055 for CVE-2015-8878","url":"https://bugzilla.suse.com/981055"}],"title":"SUSE CVE CVE-2015-8878","tracking":{"current_release_date":"2023-02-15T05:10:37Z","generator":{"date":"2023-02-15T05:10:37Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2015-8878","initial_release_date":"2023-02-15T05:10:37Z","revision_history":[{"date":"2023-02-15T05:10:37Z","number":"2","summary":"Current version"}],"status":"interim","version":"2"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12","product":{"name":"SUSE Linux Enterprise Software Development Kit 12","product_id":"SUSE Linux Enterprise Software Development Kit 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP1","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP1","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP1","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12","product":{"name":"SUSE Linux Enterprise Software Development Kit 12","product_id":"SUSE Linux Enterprise Software Development Kit 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP1","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP1","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP1","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12","product":{"name":"SUSE Linux Enterprise Software Development Kit 12","product_id":"SUSE Linux Enterprise Software Development Kit 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP1","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP1","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP1","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 12","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:12"}}},{"category":"product_version","name":"apache2-mod_php5","product":{"name":"apache2-mod_php5","product_id":"apache2-mod_php5"}},{"category":"product_version","name":"php5","product":{"name":"php5","product_id":"php5","product_identification_helper":{"cpe":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"}}},{"category":"product_version","name":"php5-bcmath","product":{"name":"php5-bcmath","product_id":"php5-bcmath"}},{"category":"product_version","name":"php5-bz2","product":{"name":"php5-bz2","product_id":"php5-bz2"}},{"category":"product_version","name":"php5-calendar","product":{"name":"php5-calendar","product_id":"php5-calendar"}},{"category":"product_version","name":"php5-ctype","product":{"name":"php5-ctype","product_id":"php5-ctype"}},{"category":"product_version","name":"php5-curl","product":{"name":"php5-curl","product_id":"php5-curl"}},{"category":"product_version","name":"php5-dba","product":{"name":"php5-dba","product_id":"php5-dba"}},{"category":"product_version","name":"php5-devel","product":{"name":"php5-devel","product_id":"php5-devel"}},{"category":"product_version","name":"php5-dom","product":{"name":"php5-dom","product_id":"php5-dom"}},{"category":"product_version","name":"php5-enchant","product":{"name":"php5-enchant","product_id":"php5-enchant"}},{"category":"product_version","name":"php5-exif","product":{"name":"php5-exif","product_id":"php5-exif"}},{"category":"product_version","name":"php5-fastcgi","product":{"name":"php5-fastcgi","product_id":"php5-fastcgi"}},{"category":"product_version","name":"php5-fileinfo","product":{"name":"php5-fileinfo","product_id":"php5-fileinfo"}},{"category":"product_version","name":"php5-fpm","product":{"name":"php5-fpm","product_id":"php5-fpm"}},{"category":"product_version","name":"php5-ftp","product":{"name":"php5-ftp","product_id":"php5-ftp"}},{"category":"product_version","name":"php5-gd","product":{"name":"php5-gd","product_id":"php5-gd"}},{"category":"product_version","name":"php5-gettext","product":{"name":"php5-gettext","product_id":"php5-gettext"}},{"category":"product_version","name":"php5-gmp","product":{"name":"php5-gmp","product_id":"php5-gmp"}},{"category":"product_version","name":"php5-iconv","product":{"name":"php5-iconv","product_id":"php5-iconv"}},{"category":"product_version","name":"php5-imap","product":{"name":"php5-imap","product_id":"php5-imap"}},{"category":"product_version","name":"php5-intl","product":{"name":"php5-intl","product_id":"php5-intl"}},{"category":"product_version","name":"php5-json","product":{"name":"php5-json","product_id":"php5-json"}},{"category":"product_version","name":"php5-ldap","product":{"name":"php5-ldap","product_id":"php5-ldap"}},{"category":"product_version","name":"php5-mbstring","product":{"name":"php5-mbstring","product_id":"php5-mbstring"}},{"category":"product_version","name":"php5-mcrypt","product":{"name":"php5-mcrypt","product_id":"php5-mcrypt"}},{"category":"product_version","name":"php5-mysql","product":{"name":"php5-mysql","product_id":"php5-mysql"}},{"category":"product_version","name":"php5-odbc","product":{"name":"php5-odbc","product_id":"php5-odbc"}},{"category":"product_version","name":"php5-opcache","product":{"name":"php5-opcache","product_id":"php5-opcache"}},{"category":"product_version","name":"php5-openssl","product":{"name":"php5-openssl","product_id":"php5-openssl"}},{"category":"product_version","name":"php5-pcntl","product":{"name":"php5-pcntl","product_id":"php5-pcntl"}},{"category":"product_version","name":"php5-pdo","product":{"name":"php5-pdo","product_id":"php5-pdo"}},{"category":"product_version","name":"php5-pear","product":{"name":"php5-pear","product_id":"php5-pear"}},{"category":"product_version","name":"php5-pgsql","product":{"name":"php5-pgsql","product_id":"php5-pgsql"}},{"category":"product_version","name":"php5-phar","product":{"name":"php5-phar","product_id":"php5-phar"}},{"category":"product_version","name":"php5-posix","product":{"name":"php5-posix","product_id":"php5-posix"}},{"category":"product_version","name":"php5-pspell","product":{"name":"php5-pspell","product_id":"php5-pspell"}},{"category":"product_version","name":"php5-shmop","product":{"name":"php5-shmop","product_id":"php5-shmop"}},{"category":"product_version","name":"php5-snmp","product":{"name":"php5-snmp","product_id":"php5-snmp"}},{"category":"product_version","name":"php5-soap","product":{"name":"php5-soap","product_id":"php5-soap"}},{"category":"product_version","name":"php5-sockets","product":{"name":"php5-sockets","product_id":"php5-sockets"}},{"category":"product_version","name":"php5-sqlite","product":{"name":"php5-sqlite","product_id":"php5-sqlite"}},{"category":"product_version","name":"php5-suhosin","product":{"name":"php5-suhosin","product_id":"php5-suhosin"}},{"category":"product_version","name":"php5-sysvmsg","product":{"name":"php5-sysvmsg","product_id":"php5-sysvmsg"}},{"category":"product_version","name":"php5-sysvsem","product":{"name":"php5-sysvsem","product_id":"php5-sysvsem"}},{"category":"product_version","name":"php5-sysvshm","product":{"name":"php5-sysvshm","product_id":"php5-sysvshm"}},{"category":"product_version","name":"php5-tokenizer","product":{"name":"php5-tokenizer","product_id":"php5-tokenizer"}},{"category":"product_version","name":"php5-wddx","product":{"name":"php5-wddx","product_id":"php5-wddx"}},{"category":"product_version","name":"php5-xmlreader","product":{"name":"php5-xmlreader","product_id":"php5-xmlreader"}},{"category":"product_version","name":"php5-xmlrpc","product":{"name":"php5-xmlrpc","product_id":"php5-xmlrpc"}},{"category":"product_version","name":"php5-xmlwriter","product":{"name":"php5-xmlwriter","product_id":"php5-xmlwriter"}},{"category":"product_version","name":"php5-xsl","product":{"name":"php5-xsl","product_id":"php5-xsl"}},{"category":"product_version","name":"php5-zip","product":{"name":"php5-zip","product_id":"php5-zip"}},{"category":"product_version","name":"php5-zlib","product":{"name":"php5-zlib","product_id":"php5-zlib"}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"apache2-mod_php5 as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5"},"product_reference":"apache2-mod_php5","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5 as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5"},"product_reference":"php5","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-bcmath as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath"},"product_reference":"php5-bcmath","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-bz2 as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2"},"product_reference":"php5-bz2","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-calendar as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar"},"product_reference":"php5-calendar","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-ctype as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype"},"product_reference":"php5-ctype","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-curl as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl"},"product_reference":"php5-curl","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-dba as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba"},"product_reference":"php5-dba","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-dom as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom"},"product_reference":"php5-dom","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-enchant as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant"},"product_reference":"php5-enchant","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-exif as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif"},"product_reference":"php5-exif","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-fastcgi as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi"},"product_reference":"php5-fastcgi","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-fileinfo as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo"},"product_reference":"php5-fileinfo","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-fpm as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm"},"product_reference":"php5-fpm","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-ftp as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp"},"product_reference":"php5-ftp","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-gd as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd"},"product_reference":"php5-gd","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-gettext as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext"},"product_reference":"php5-gettext","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-gmp as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp"},"product_reference":"php5-gmp","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-iconv as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv"},"product_reference":"php5-iconv","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-imap as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap"},"product_reference":"php5-imap","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-intl as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl"},"product_reference":"php5-intl","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-json as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-json"},"product_reference":"php5-json","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-ldap as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap"},"product_reference":"php5-ldap","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-mbstring as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring"},"product_reference":"php5-mbstring","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-mcrypt as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt"},"product_reference":"php5-mcrypt","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-mysql as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql"},"product_reference":"php5-mysql","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-odbc as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc"},"product_reference":"php5-odbc","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-opcache as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache"},"product_reference":"php5-opcache","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-openssl as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl"},"product_reference":"php5-openssl","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-pcntl as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl"},"product_reference":"php5-pcntl","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-pdo as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo"},"product_reference":"php5-pdo","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-pear as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear"},"product_reference":"php5-pear","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-pgsql as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql"},"product_reference":"php5-pgsql","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-phar as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar"},"product_reference":"php5-phar","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-posix as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix"},"product_reference":"php5-posix","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-pspell as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell"},"product_reference":"php5-pspell","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-shmop as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop"},"product_reference":"php5-shmop","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-snmp as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp"},"product_reference":"php5-snmp","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-soap as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap"},"product_reference":"php5-soap","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-sockets as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets"},"product_reference":"php5-sockets","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-sqlite as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite"},"product_reference":"php5-sqlite","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-suhosin as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin"},"product_reference":"php5-suhosin","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-sysvmsg as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg"},"product_reference":"php5-sysvmsg","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-sysvsem as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem"},"product_reference":"php5-sysvsem","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-sysvshm as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm"},"product_reference":"php5-sysvshm","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-tokenizer as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer"},"product_reference":"php5-tokenizer","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-wddx as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx"},"product_reference":"php5-wddx","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-xmlreader as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader"},"product_reference":"php5-xmlreader","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-xmlrpc as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc"},"product_reference":"php5-xmlrpc","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-xmlwriter as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter"},"product_reference":"php5-xmlwriter","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-xsl as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl"},"product_reference":"php5-xsl","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-zip as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip"},"product_reference":"php5-zip","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-zlib as component of SUSE Linux Enterprise Module for Web and Scripting 12","product_id":"SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib"},"product_reference":"php5-zlib","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 12"},{"category":"default_component_of","full_product_name":{"name":"php5-devel as component of SUSE Linux Enterprise Software Development Kit 12","product_id":"SUSE Linux Enterprise Software Development Kit 12:php5-devel"},"product_reference":"php5-devel","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12"},{"category":"default_component_of","full_product_name":{"name":"php5 as component of SUSE Linux Enterprise Software Development Kit 12","product_id":"SUSE Linux Enterprise Software Development Kit 12:php5"},"product_reference":"php5","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12"},{"category":"default_component_of","full_product_name":{"name":"php5-devel as component of SUSE Linux Enterprise Software Development Kit 12 SP1","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel"},"product_reference":"php5-devel","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"php5 as component of SUSE Linux Enterprise Software Development Kit 12 SP1","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP1:php5"},"product_reference":"php5","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP1"}]},"vulnerabilities":[{"cve":"CVE-2015-8878","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2015-8878"}],"notes":[{"category":"general","text":"main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.","title":"Vulnerability description"}],"product_status":{"known not affected":["SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5","SUSE Linux Enterprise Module for Web and Scripting 12:php5","SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath","SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2","SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar","SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype","SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl","SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba","SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom","SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant","SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif","SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi","SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo","SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm","SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp","SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd","SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext","SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp","SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv","SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap","SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl","SUSE Linux Enterprise Module for Web and Scripting 12:php5-json","SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap","SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring","SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt","SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql","SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc","SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache","SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl","SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl","SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo","SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear","SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql","SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar","SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix","SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell","SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop","SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp","SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap","SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets","SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite","SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin","SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg","SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem","SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm","SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer","SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx","SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader","SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc","SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter","SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl","SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip","SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib","SUSE Linux Enterprise Software Development Kit 12 SP1:php5","SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel","SUSE Linux Enterprise Software Development Kit 12:php5","SUSE Linux Enterprise Software Development Kit 12:php5-devel"]},"references":[{"category":"external","summary":"CVE-2015-8878","url":"https://www.suse.com/security/cve/CVE-2015-8878"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 981055 for CVE-2015-8878","url":"https://bugzilla.suse.com/981055"}],"threats":[{"category":"impact","date":"2015-08-11T09:16:44Z","details":"critical"}],"title":"CVE-2015-8878"}]}