Skip to content
OpenAdvisories
Unscored DSA-3783-1 5 CVEs

php5 - security update

Published Feb 8, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 php5 5.6.30+dfsg-0+deb8u1

Vulnerabilities 5

  • Unscored —

    The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1…

  • Unscored —

    Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 al…

  • Unscored —

    Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 al…

  • Unscored —
    CVE-2016-10161 EPSS 13%

    The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x bef…

  • Unscored —
    CVE-2016-7479 EPSS 42%

    In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized obje…