Unscored DSA-2399-1 5 CVEs

php5 - several

Published Jan 31, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	php5	5.2.6.dfsg.1-1+lenny14
Debian · 6.0	php5	5.3.3-7+squeeze5

Vulnerabilities 5

Unscored —

CVE-2011-1938 Public exploit EPSS 23%

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might al…

May 31, 2011
Unscored —

CVE-2011-2483

crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other product…

libxcrypt Debian

Aug 25, 2011
Unscored —

CVE-2011-4566

Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platf…

Nov 29, 2011
Unscored —

CVE-2011-4885 Public exploit EPSS 83%

PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pr…

Dec 30, 2011
Unscored —

CVE-2012-0057

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a …

Feb 2, 2012