Skip to content
OpenAdvisories
Unscored DSA-2089-1 3 CVEs

php5 - several vulnerabilities

Published Aug 6, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 php5 5.2.6.dfsg.1-1+lenny9

Vulnerabilities 3

  • Unscored —

    Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to c…

  • Unscored —

    Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote at…

  • Unscored —

    The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MA…