UpHeron
All vulnerabilities

Servers and applications

CVE-2015-8994

An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a non-default configuration with the opcache.validate_permission=1 setting. The vulnerability details are as follows. In PHP SAPIs where PHP interpreters share a common parent process, Zend OpCache…

Severity
High 7.5
Published
2 Mar 2017
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Fixed in
7.0.14
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • From 5.0.0 up to 5.6.29
  • From 7.0.0 before 7.0.14

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-8994
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-8994