Skip to content
OpenAdvisories
Unscored DSA-3358-1 5 CVEs

php5 - security update

Published Sep 13, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 7 php5 5.4.45-0+deb7u1
Debian · 8 php5 5.6.13+dfsg-0+deb8u1

Vulnerabilities 5

  • Unscored —
    CVE-2015-6834 Public exploit EPSS 47%

    Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote…

    php5 Ubuntu
  • Unscored —
    CVE-2015-6835 Public exploit EPSS 36%

    The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var…

    php5 Ubuntu
  • Unscored —
    CVE-2015-6836 EPSS 10%

    The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does…

    php5 Ubuntu
  • Unscored —
    CVE-2015-6837

    The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x befor…

    php5 Ubuntu
  • Unscored —
    CVE-2015-6838

    The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x befor…

    php5 Ubuntu