Skip to content
OpenAdvisories
Unscored DSA-3618-1 6 CVEs

php5 - security update

Published Jul 14, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 php5 5.6.23+dfsg-0+deb8u1

Vulnerabilities 6

  • Unscored —

    Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in…

  • Unscored —

    Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x befor…

  • Unscored —

    Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and …

  • Unscored —
    CVE-2016-5771 EPSS 15%

    spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize…

  • Unscored —

    Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5…

  • Unscored —

    php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts wit…