Skip to content
OpenAdvisories
Unscored DLA-145-1 5 CVEs

php5 - security update

Published Jan 31, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 php5 5.3.3-7+squeeze24

Vulnerabilities 5

  • Unscored —
    CVE-2014-0237 EPSS 20%

    The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 al…

  • Unscored —
    CVE-2014-0238 EPSS 21%

    The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 all…

  • Unscored —

    softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bo…

  • Unscored —

    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of s…

  • Unscored —

    The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x…