All vulnerabilities

Servers and applications

CVE-2015-9253

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master process to consume 100% of the CPU, and consume disk space with a large volume of error…

Severity
Medium 6.5
Published
19 Feb 2018
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Fixed in
7.1.20, 7.2.8
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • Every version before 7.1.20
  • From 7.2.0 before 7.2.8
  • Version 7.3.0-alpha1
  • Version 7.3.0-alpha2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-9253
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-9253