php5 - several

Fixed packages 1

Vulnerabilities 16

• Unscored —
  CVE-2010-4697

  Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-depende…

  Jan 18, 2011
• Unscored —
  CVE-2011-1072

  The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.…

  Mar 3, 2011
• Unscored —
  CVE-2011-1092 Public exploit EPSS 18%

  Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of servi…

  Mar 15, 2011
• Unscored —
  CVE-2011-1148

  Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers…

  Mar 18, 2011
• Unscored —
  CVE-2011-1464

  Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, …

  Mar 20, 2011
• Unscored —
  CVE-2011-1467 Public exploit EPSS 13%

  Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in P…

  Mar 20, 2011
• Unscored —
  CVE-2011-1468 Public exploit EPSS 13%

  Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of se…

  Mar 20, 2011
• Unscored —
  CVE-2011-1469

  Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a de…

  Mar 20, 2011
• Unscored —
  CVE-2011-1470 Public exploit

  The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application cras…

  Mar 20, 2011
• Unscored —
  CVE-2011-1657

  The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-de…

  Aug 25, 2011
• Unscored —
  CVE-2011-3182 Public exploit EPSS 19%

  PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which …

  Aug 25, 2011
• Unscored —
  CVE-2011-3267

  PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause …

  Aug 25, 2011
• Unscored —
  CVE-2011-4153 Public exploit EPSS 12%

  PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to ca…

  Jan 18, 2012
• Unscored —
  CVE-2012-0781 Public exploit EPSS 10%

  The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer derefer…

  Jan 18, 2012
• Unscored —
  CVE-2012-0788 Public exploit

  The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote …

  Feb 14, 2012
• Unscored —
  CVE-2012-0831

  PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing o…

  Feb 10, 2012