Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | php5 | 5.4.41-0+deb7u1 |
| Debian · 8 | php5 | 5.6.9+dfsg-0+deb8u1 |
Vulnerabilities 8
-
Unscored —
ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sen…
-
Unscored —
The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 a…
-
Unscored —CVE-2015-3329 EPSS 38%
Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x bef…
-
Unscored —CVE-2015-4021 EPSS 20%
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 doe…
-
Unscored —CVE-2015-4022 EPSS 20%
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x befo…
-
Unscored —CVE-2015-4024 EPSS 42%
Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5…
-
Unscored —CVE-2015-4025 EPSS 17%
PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character …
-
Unscored —CVE-2015-4026 EPSS 19%
The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname up…