Every CVE Search/ Get API key

CVE-2008-5498

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...

5.0 MediumPublic exploit

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Exploit likelihood

8.85%Down 3.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Record
CVE-2008-5498
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Record
CVE-2008-5498
Updated
2026-11-02
EUVDEUVD-2008-5475 No score

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Record
EUVD-2008-5475
Updated
2026-11-03
GitHub AdvisoriesGHSA-8c7c-9pp7-6933 No score

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Record
GHSA-8c7c-9pp7-6933
Weakness
CWE-200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-pgsql
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
Show 142 moreShow less
Affected packages
PackageAffectedFixed
php-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-pgsql
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-pgsql
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-pgsql
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-common
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ncurses
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-bcmath
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-cli
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-common
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-dba
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-devel
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-gd
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-imap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-ldap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-mbstring
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-mysql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-ncurses
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-odbc
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-pdo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-pgsql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-snmp
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-soap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-xml
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-xmlrpc
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 5.2.8 gd library - 'imageRotate()' Information Leak2009-01-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5498 is a medium vulnerability (CVSS 5.0) in Php, published December 26, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.85%, the 95th percentile. No source names a fixed version.

References

Show 59 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open