Skip to content
OpenAdvisories
Unscored DLA-94-1 4 CVEs

php5 - security update

Published Nov 25, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 php5 5.3.3-7+squeeze23

Vulnerabilities 4

  • Unscored —
    CVE-2014-3668 EPSS 27%

    Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC ex…

  • Unscored —
    CVE-2014-3669 EPSS 29%

    Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.…

  • Unscored —
    CVE-2014-3670 EPSS 23%

    The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x b…

  • Unscored —
    CVE-2014-3710 EPSS 14%

    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure…