Skip to content
OpenAdvisories
Unscored DLA-67-1 3 CVEs

php5 - security update

Published Sep 29, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 php5 5.3.3-7+squeeze22

Vulnerabilities 3

  • Unscored —
    CVE-2014-3538 EPSS 12%

    file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attacker…

  • Unscored —
    CVE-2014-3587 EPSS 20%

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…

  • Unscored —
    CVE-2014-3597 EPSS 15%

    Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.1…