CVE-2010-2531
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...
4.3 Medium
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.
Exploit likelihood
5.00%Down 7.3 points since Feb 4, 2022
What each source reports
NVD Score used
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.
- Record
CVE-2010-2531- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.
- Record
CVE-2010-2531- Updated
- 2026-11-02
EUVDEUVD-2010-2535 No score
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.
- Record
EUVD-2010-2535- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cpj2-grx5-hpg2 No score
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.
- Record
GHSA-cpj2-grx5-hpg2- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:5.0 From an advisory covering 8 CVEs |
before 5.2.6.dfsg.1-1+lenny12, plus listed versions 5.2.6.dfsg.1-1+lenny105.2.6.dfsg.1-1+lenny115.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9 |
5.2.6.dfsg.1-1+lenny12 |
php5Debian:6.0 From an advisory covering 8 CVEs |
before 5.3.3-7+squeeze3, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze2 |
5.3.3-7+squeeze3 |
phpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
Show 92 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.31 | 0:4.3.9-3.31 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:5.1.6-27.el5_5.3 | 0:5.1.6-27.el5_5.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2531 is a medium vulnerability (CVSS 4.3) in Php, published August 20, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.00%, the 92nd percentile. No source names a fixed version.
References
support.apple.com/kb/HT4435
marc.info?l=bugtraq&m=133469208622507&w=2
openwall.com/lists/oss-security/2010/07/16/3
svn.php.net/viewvc/php/php-src/trunk/ext/standard/tests/general_functions/var_export_error2.phpt?view=log&pathrev=301143
bugzilla.redhat.com/show_bug.cgi?id=617673
Show 42 moreShow less
debian.org/security/2011/dsa-2266
lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
redhat.com/support/errata/RHSA-2010-0919.html
php.net/archive/2010.php
secunia.com/advisories/42410
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
vupen.com/english/advisories/2010/3081
nvd.nist.gov/vuln/detail/CVE-2010-2531
github.com/advisories/GHSA-cpj2-grx5-hpg2
access.redhat.com/errata/RHSA-2010:0919
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0919.json
cve.org/CVERecord?id=CVE-2009-5016