Skip to content
OpenAdvisories
Unscored DSA-3344-1 8 CVEs

php5 - security update

Published Aug 27, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 7 php5 5.4.44-0+deb7u1
Debian · 8 php5 5.6.12+dfsg-0+deb8u1

Vulnerabilities 8

  • Unscored —
    CVE-2015-4598

    PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, whic…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4643 EPSS 15%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4644

    The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before …

    php5 Ubuntu
  • Unscored —
    CVE-2015-5589

    The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x befor…

    php5 Ubuntu
  • Unscored —
    CVE-2015-5590

    Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-6831

    Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow…

    php5 Ubuntu
  • Unscored —
    CVE-2015-6832

    Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x b…

    php5 Ubuntu
  • Unscored —
    CVE-2015-6833

    Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6…

    php5 Ubuntu