Unscored DSA-3117-1 2 CVEs

php5 - security update

Published Dec 31, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	php5	5.4.36-0+deb7u1

Vulnerabilities 2

Unscored —

CVE-2014-8142 Public exploit EPSS 55%

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

php5 Ubuntu

Dec 20, 2014
Unscored —

CVE-2014-9427 EPSS 18%

sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mma…

php5 Ubuntu

Jan 3, 2015