Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-aa1t-vkag-2kbr
Vulnerability ID VCID-aa1t-vkag-2kbr
Aliases CVE-2015-6831
Summary Multiple vulnerabilities have been found in PHP, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (1)
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6831.json
https://api.first.org/data/v1/epss?cve=CVE-2015-6831
https://bugs.php.net/bug.php?id=70155
https://bugs.php.net/bug.php?id=70166
https://bugs.php.net/bug.php?id=70168
https://bugs.php.net/bug.php?id=70169
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4598
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4643
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4644
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5589
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5590
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6831
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6832
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6833
http://www.debian.org/security/2015/dsa-3344
http://www.openwall.com/lists/oss-security/2015/08/19/3
http://www.php.net/ChangeLog-5.php
http://www.securityfocus.com/bid/76737
1256290 https://bugzilla.redhat.com/show_bug.cgi?id=1256290
cpe:2.3:a:php:php:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
CVE-2015-6831 https://nvd.nist.gov/vuln/detail/CVE-2015-6831
GLSA-201606-10 https://security.gentoo.org/glsa/201606-10
RHSA-2016:0457 https://access.redhat.com/errata/RHSA-2016:0457
USN-2758-1 https://usn.ubuntu.com/2758-1/
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2015-6831
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2015-6831
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)
Percentile 0.78487
EPSS Score 0.01156
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:02:49.899472+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201606-10 38.0.0