Skip to content
OpenAdvisories
Unscored DSA-2195-1 6 CVEs

php5 - several

Published Mar 19, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 php5 5.2.6.dfsg.1-1+lenny10
Debian · 6.0 php5 5.3.3-7+squeeze1

Vulnerabilities 6

  • Unscored —
    CVE-2010-1128 Public exploit

    The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easi…

  • Unscored —
    CVE-2010-3709 Public exploit EPSS 13%

    The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent…

  • Unscored —
    CVE-2010-3710

    Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FI…

  • Unscored —
    CVE-2010-3870 Public exploit EPSS 11%

    The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed s…

  • Unscored —
    CVE-2010-4150

    Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.…

    php5 Ubuntu
  • Unscored —
    CVE-2011-0441

    The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink…