Skip to content
OpenAdvisories
Unscored DSA-3560-1 5 CVEs

php5 - security update

Published Apr 27, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 php5 5.6.20+dfsg-0+deb8u1

Vulnerabilities 5

  • Unscored —
    CVE-2015-8865

    The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6…

    php5 php7.0 file file Debian Ubuntu
  • Unscored —
    CVE-2016-4070

    Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, an…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4071 Public exploit EPSS 20%

    Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4072

    The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute a…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-4073

    Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.…

    php5 php7.0 Ubuntu