CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. Its EPSS score suggests a 20.8% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2015-4022
Severity
HIGH
CVSS
7.5
EPSS
20.84%
Original NVD Description
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.