Skip to content
OpenAdvisories
Unscored DSA-3195-1 6 CVEs

php5 - security update

Published Mar 18, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 php5 5.4.38-0+deb7u1

Vulnerabilities 6

  • Unscored —
    CVE-2014-9705 EPSS 19%

    Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-0231 Public exploit EPSS 44%

    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

    php5 Ubuntu
  • Unscored —
    CVE-2015-0232 EPSS 16%

    The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 …

    php5 Ubuntu
  • Unscored —
    CVE-2015-0273 Public exploit EPSS 43%

    Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x bef…

    php5 Ubuntu
  • Unscored —
    CVE-2015-1352

    The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate …

    php5 Ubuntu
  • Unscored —
    CVE-2015-2305

    Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32…

    php5 radare2 clamav clamav Debian Ubuntu