Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 5.4.39 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2016-7478
Zend/zend_exceptions.c in PHP, possibly 5.x prior to 5.6.28 and 7.x prior to 7.0.13, allows remote malicious users to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Php Php 5.0.0Php Php 5.0.1Php Php 5.0.2Php Php 5.1.3Php Php 5.1.4Php Php 5.2.13Php Php 5.2.14Php Php 5.2.5Php Php 5.2.6Php Php 5.3.11Php Php 5.3.12Php Php 5.3.2Php Php 5.3.20Php Php 5.3.27Php Php 5.3.28Php Php 5.3.9Php Php 5.4.0Php Php 5.4.13Php Php 5.4.14Php Php 5.4.19Php Php 5.4.2Php Php 5.4.26
NA
CVE-2015-4021
The phar_parse_tarfile function in ext/phar/tar.c in PHP prior to 5.4.41, 5.5.x prior to 5.5.25, and 5.6.x prior to 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote malicious users to cause a denial of service (i...
Redhat Enterprise Linux Hpc Node Eus 7.1Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Apple Mac Os XRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Php Php 5.5.0Php Php 5.5.1Php Php 5.5.19Php Php 5.5.2Php Php 5.5.4Php Php 5.5.5Php Php 5.6.0Php Php 5.6.5Php Php 5.6.6Php Php 5.4.39Php Php 5.5.12Php Php 5.5.13Php Php 5.5.22
NA
CVE-2015-4022
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP prior to 5.4.41, 5.5.x prior to 5.5.25, and 5.6.x prior to 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.
Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node Eus 7.1Redhat Enterprise Linux Workstation 7.0Php PhpPhp Php 5.4.39Php Php 5.5.0Php Php 5.5.11Php Php 5.5.12Php Php 5.5.21Php Php 5.5.22Php Php 5.5.7Php Php 5.5.8Php Php 5.6.0Php Php 5.6.8Php Php 5.5.9Php Php 5.5.18Php Php 5.5.19Php Php 5.5.3Php Php 5.5.4
NA
CVE-2015-4024
Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP prior to 5.4.41, 5.5.x prior to 5.5.25, and 5.6.x prior to 5.6.9 allows remote malicious users to cause a denial of service (CPU consumption) via crafted form data that triggers...
Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Apple Mac Os XPhp Php 5.5.0Php Php 5.5.1Php Php 5.5.19Php Php 5.5.2Php Php 5.5.4Php Php 5.5.5Php Php 5.6.0Php Php 5.6.5Php Php 5.6.6Php PhpPhp Php 5.5.10Php Php 5.5.11Php Php 5.5.20Php Php 5.5.21Php Php 5.5.6Php Php 5.5.7Php Php 5.5.8Php Php 5.6.7Php Php 5.6.8
NA
CVE-2015-4026
The pcntl_exec implementation in PHP prior to 5.4.41, 5.5.x prior to 5.5.25, and 5.6.x prior to 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote malicious users to bypass intended extension restrictions and execute files with unexpected name...
Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Php Php 5.5.0Php PhpPhp Php 5.4.39Php Php 5.5.11Php Php 5.5.12Php Php 5.5.21Php Php 5.5.22Php Php 5.5.8Php Php 5.6.0Php Php 5.6.8Php Php 5.5.9Php Php 5.5.18Php Php 5.5.19Php Php 5.5.4Php Php 5.5.5Php Php 5.6.4Php Php 5.6.5Php Php 5.5.1Php Php 5.5.10Php Php 5.5.2
NA
CVE-2015-2331
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and previous versions, as used in the ZIP extension in PHP prior to 5.4.39, 5.5.x prior to 5.5.23, and 5.6.x prior to 5.6.7 and other products, allows remote malicious users to cause a denial of servi...
Nih LibzipPhp Php 5.6.1Php Php 5.5.0Php Php 5.6.0Php Php 5.6.5Php Php 5.5.19Php Php 5.5.16Php Php 5.5.1Php Php 5.5.5Php Php 5.6.4Php Php 5.5.21Php Php 5.6.6Php Php 5.5.17Php Php 5.5.14Php Php 5.5.7Php Php 5.6.2Php Php 5.5.12Php PhpPhp Php 5.5.6Php Php 5.5.3Php Php 5.5.8Php Php 5.5.15
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook