Unscored DSA-1940-1 5 CVEs

php5 - multiple issues

Published Nov 25, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	php5	5.2.0+dfsg-8+etch16
Debian · 5.0	php5	5.2.6.dfsg.1-1+lenny4

Vulnerabilities 5

Unscored —

CVE-2009-2626 Public exploit

The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific…

Dec 1, 2009
Unscored —

CVE-2009-2687

The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of servic…

Aug 5, 2009
Unscored —

CVE-2009-3291

The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validatio…

Sep 22, 2009
Unscored —

CVE-2009-3292

Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related t…

Sep 22, 2009
Unscored —

CVE-2009-4017 Public exploit EPSS 12%

PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multip…

Nov 24, 2009