Skip to content
OpenAdvisories
Unscored RHSA-2006:0688 6 CVEs

Red Hat Security Advisory: php security update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-bcmath 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-dba 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-debuginfo 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-devel 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-gd 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-imap 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-ldap 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-mbstring 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-mysql 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-ncurses 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-odbc 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-pdo 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-pgsql 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-snmp 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-soap 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-xml 0:5.1.4-1.el4s1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 php-xmlrpc 0:5.1.4-1.el4s1.4

Vulnerabilities 6

  • Unscored —
    CVE-2006-4020 Public exploit

    scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code v…

  • Unscored —
    CVE-2006-4482

    Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP b…

  • Unscored —
    CVE-2006-4484

    Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows…

    libgd2 xloadimage Debian
  • Unscored —
    CVE-2006-4485

    The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.

  • Unscored —
    CVE-2006-4486

    Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dep…

  • Unscored —
    CVE-2006-4812 Public exploit EPSS 21%

    Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argum…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=207090
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=209408
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0688.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-4020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618174
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4020
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4020
  • report
    https://access.redhat.com/security/cve/CVE-2006-4482
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618186
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4482
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4482
  • report
    https://access.redhat.com/security/cve/CVE-2006-4484
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431568
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4484
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4484
  • report
    https://access.redhat.com/security/cve/CVE-2006-4485
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618187
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4485
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4485
  • report
    https://access.redhat.com/security/cve/CVE-2006-4486
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618188
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4486
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4486
  • report
    https://access.redhat.com/security/cve/CVE-2006-4812
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618205
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4812
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4812