CVE-2013-4248
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...
CVE-2013-4248 is a medium vulnerability (CVSS 4.3) in Php, published August 18, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.33%, the 88th percentile. Fixed in php5 5.3.3-7+squeeze17.
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Exploit likelihood
What each source reports
NVD Score used
4.3
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
- Record
CVE-2013-4248- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
- Record
CVE-2013-4248- Updated
- 2026-11-02
EUVDEUVD-2013-4152 No score
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
- Record
EUVD-2013-4152- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhfm-3287-cc2v No score
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
- Record
GHSA-hhfm-3287-cc2v- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVBELL-CVE-2013-4248
4.3
CVE-2013-4248 does not affect BellSoft software
- Record
BELL-CVE-2013-4248- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
OSVMGASA-2013-0264 No score
Updated php packages fix CVE-2013-4248 and prevent the two gd packages being installed at once
Updated php packages fix security vulnerability:
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority (CVE-2013-4248).
Additionally it prevents php-gd and php-gd-bundled packages being installed at the same time, which causes errors.
- Record
MGASA-2013-0264- Updated
- 2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2024:10290-1 No score
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10290-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10344-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11169-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0370-1 No score
Security update for php53
This update fixes the following vulnerabilities in php:
* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
(CVE-2014-3668)
Security Issues:
* CVE-2014-3669
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
- Record
SUSE-SU-2015:0370-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0436-1 No score
Security update for php53
This update fixes the following vulnerabilities in php:
* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
(CVE-2014-3668)
Security Issues:
* CVE-2014-3669
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
- Record
SUSE-SU-2015:0436-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1018-1 No score
Security update for php53
This update fixes the following vulnerabilities in php:
* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
(CVE-2014-3668)
Security Issues:
* CVE-2014-3669
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
- Record
SUSE-SU-2015:1018-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1265-1 No score
Security update for php53
This update fixes the following vulnerabilities in php:
* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
(CVE-2014-3668)
Security Issues:
* CVE-2014-3669
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
- Record
SUSE-SU-2015:1265-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:6.0 |
before 5.3.3-7+squeeze17, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze135.3.3-7+squeeze145.3.3-7+squeeze15 Show 8 moreShow less5.3.3-7+squeeze165.3.3-7+squeeze25.3.3-7+squeeze35.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze75.3.3-7+squeeze85.3.3-7+squeeze9 |
5.3.3-7+squeeze17 |
php5Debian:7 |
before 5.4.4-14+deb7u4, plus listed versions 5.4.4-145.4.4-14+deb7u15.4.4-14+deb7u25.4.4-14+deb7u3 |
5.4.4-14+deb7u4 |
phpMageia:2 |
before 5.3.27-1.2.mga2 | 5.3.27-1.2.mga2 |
phpMageia:3 |
before 5.4.19-1.1.mga3 | 5.4.19-1.1.mga3 |
php-apcMageia:3 |
before 3.1.14-7.3.mga3 | 3.1.14-7.3.mga3 |
php-gd-bundledMageia:3 |
before 5.4.19-1.mga3 | 5.4.19-1.mga3 |
php53Red Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
Show 155 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php53-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-intlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-processRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53Red Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-cliRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-commonRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-dbaRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-develRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-gdRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-imapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-intlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-ldapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-odbcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pdoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-processRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pspellRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-snmpRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-soapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
phpRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-bcmathRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-cliRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-commonRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-dbaRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-develRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-embeddedRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-enchantRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-fpmRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-gdRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-imapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-intlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ldapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mbstringRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mysqlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-odbcRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pdoRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pgsqlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-processRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pspellRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-recodeRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-snmpRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-soapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-tidyRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ztsRed Hat:enterprise_linux:6::client |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
phpRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-bcmathRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-dbaRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-develRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-embeddedRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-enchantRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-fpmRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-gdRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-imapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-intlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ldapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mbstringRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mysqlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-odbcRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pdoRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pgsqlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-processRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pspellRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-recodeRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-snmpRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-soapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-tidyRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ztsRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-cliRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-commonRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
phpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-bcmathRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-dbaRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-develRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-enchantRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-fpmRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-imapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-intlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mbstringRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-processRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pspellRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-recodeRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-snmpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-tidyRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ztsRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-cliRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-commonRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-gdRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ldapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mysqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-odbcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pdoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pgsqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-soapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
phpRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-bcmathRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-dbaRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-develRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-embeddedRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-enchantRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-fpmRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-imapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-intlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mbstringRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-processRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pspellRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-recodeRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-snmpRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-tidyRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ztsRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-cliRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-commonRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-gdRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-ldapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-mysqlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-odbcRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pdoRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-pgsqlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-soapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-26.el6 | 0:5.3.3-26.el6 |
php7openSUSE:Tumbleweed |
before 7.0.14-1.4 | 7.0.14-1.4 |
php5openSUSE:Tumbleweed |
before 5.6.28-1.1 | 5.6.28-1.1 |
php8openSUSE:Tumbleweed |
before 8.0.11-1.1 | 8.0.11-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/54657
debian.org/security/2013/dsa-2742
lists.opensuse.org/opensuse-updates/2013-12/msg00126.html
securityfocus.com/bid/61776
git.php.net?p=php-src.git%3Ba=commit%3Bh=2874696a5a8d46639d261571f915c493cd875897
secunia.com/advisories/59652
Show 194 moreShow less
secunia.com/advisories/55078
marc.info?l=bugtraq&m=141390017113542&w=2
support.apple.com/kb/HT6150
ubuntu.com/usn/USN-1937-1
php.net/ChangeLog-5.php
secunia.com/advisories/54478
rhn.redhat.com/errata/RHSA-2013-1307.html
securitytracker.com/id/1028924
lists.opensuse.org/opensuse-updates/2013-12/msg00125.html
rhn.redhat.com/errata/RHSA-2013-1615.html
nvd.nist.gov/vuln/detail/CVE-2013-4248
git.php.net?p=php-src.git;a=commit;h=2874696a5a8d46639d261571f915c493cd875897
github.com/advisories/GHSA-hhfm-3287-cc2v
docs.bell-sw.com/security/cves/CVE-2013-4248
advisories.mageia.org/MGASA-2013-0264.html
git.php.net?p=php-src.git;a=commit;h=dcea4ec698dcae39b7bba6f6aa08933cbfee6755
git.php.net?p=php-src.git;a=commit;h=c1c49d6e3983c9ce0b43ffe7bf6e03b809ed048b
mandriva.com/en/support/security/advisories/advisory/MDVSA-2013:221
bugs.mageia.org/show_bug.cgi?id=10997
access.redhat.com/errata/RHSA-2013:1307
access.redhat.com/security/updates/classification
access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/5.10_Technical_Notes/php53.html
bugzilla.redhat.com/show_bug.cgi?id=662707
bugzilla.redhat.com/show_bug.cgi?id=789468
bugzilla.redhat.com/show_bug.cgi?id=828051
bugzilla.redhat.com/show_bug.cgi?id=837044
bugzilla.redhat.com/show_bug.cgi?id=853329
bugzilla.redhat.com/show_bug.cgi?id=869691
bugzilla.redhat.com/show_bug.cgi?id=869693
bugzilla.redhat.com/show_bug.cgi?id=869697
bugzilla.redhat.com/show_bug.cgi?id=892695
bugzilla.redhat.com/show_bug.cgi?id=918187
bugzilla.redhat.com/show_bug.cgi?id=951075
bugzilla.redhat.com/show_bug.cgi?id=953818
bugzilla.redhat.com/show_bug.cgi?id=997097
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1307.json
access.redhat.com/security/cve/CVE-2006-7243
cve.org/CVERecord?id=CVE-2006-7243
nvd.nist.gov/vuln/detail/CVE-2006-7243
access.redhat.com/security/cve/CVE-2011-1398
cve.org/CVERecord?id=CVE-2011-1398
nvd.nist.gov/vuln/detail/CVE-2011-1398
access.redhat.com/security/cve/CVE-2012-0831
cve.org/CVERecord?id=CVE-2012-0831
nvd.nist.gov/vuln/detail/CVE-2012-0831
access.redhat.com/security/cve/CVE-2012-2688
cve.org/CVERecord?id=CVE-2012-2688
nvd.nist.gov/vuln/detail/CVE-2012-2688
access.redhat.com/security/cve/CVE-2013-1643
cve.org/CVERecord?id=CVE-2013-1643
nvd.nist.gov/vuln/detail/CVE-2013-1643
access.redhat.com/security/cve/CVE-2013-4248
cve.org/CVERecord?id=CVE-2013-4248
access.redhat.com/errata/RHSA-2013:1615
bugzilla.redhat.com/show_bug.cgi?id=892158
bugzilla.redhat.com/show_bug.cgi?id=953814
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1615.json
suse.com/support/update/announcement/2015/suse-su-20150370-1
bugzilla.suse.com/828020
bugzilla.suse.com/829207
bugzilla.suse.com/837746
bugzilla.suse.com/842676
bugzilla.suse.com/853045
bugzilla.suse.com/854880
bugzilla.suse.com/868624
bugzilla.suse.com/880904
bugzilla.suse.com/880905
bugzilla.suse.com/882992
bugzilla.suse.com/884986
bugzilla.suse.com/884987
bugzilla.suse.com/884989
bugzilla.suse.com/884990
bugzilla.suse.com/884991
bugzilla.suse.com/884992
bugzilla.suse.com/885961
bugzilla.suse.com/886059
bugzilla.suse.com/886060
bugzilla.suse.com/893849
bugzilla.suse.com/893853
bugzilla.suse.com/902357
bugzilla.suse.com/902360
bugzilla.suse.com/902368
bugzilla.suse.com/907519
bugzilla.suse.com/910659
bugzilla.suse.com/914690
bugzilla.suse.com/917150
bugzilla.suse.com/918768
bugzilla.suse.com/919080
bugzilla.suse.com/922022
bugzilla.suse.com/922451
bugzilla.suse.com/922452
bugzilla.suse.com/923946
bugzilla.suse.com/924972
bugzilla.suse.com/925109
bugzilla.suse.com/928506
bugzilla.suse.com/928511
bugzilla.suse.com/931421
bugzilla.suse.com/931769
bugzilla.suse.com/931772
bugzilla.suse.com/931776
bugzilla.suse.com/933227
bugzilla.suse.com/935074
bugzilla.suse.com/935224
bugzilla.suse.com/935226
bugzilla.suse.com/935227
bugzilla.suse.com/935232
bugzilla.suse.com/935234
bugzilla.suse.com/935274
bugzilla.suse.com/935275
suse.com/security/cve/CVE-2013-4113
suse.com/security/cve/CVE-2013-4248
suse.com/security/cve/CVE-2013-4635
suse.com/security/cve/CVE-2013-6420
suse.com/security/cve/CVE-2013-6501
suse.com/security/cve/CVE-2013-6712
suse.com/security/cve/CVE-2014-0207
suse.com/security/cve/CVE-2014-0237
suse.com/security/cve/CVE-2014-0238
suse.com/security/cve/CVE-2014-2497
suse.com/security/cve/CVE-2014-3478
suse.com/security/cve/CVE-2014-3479
suse.com/security/cve/CVE-2014-3480
suse.com/security/cve/CVE-2014-3487
suse.com/security/cve/CVE-2014-3515
suse.com/security/cve/CVE-2014-3668
suse.com/security/cve/CVE-2014-3669
suse.com/security/cve/CVE-2014-3670
suse.com/security/cve/CVE-2014-4049
suse.com/security/cve/CVE-2014-4670
suse.com/security/cve/CVE-2014-4698
suse.com/security/cve/CVE-2014-4721
suse.com/security/cve/CVE-2014-5459
suse.com/security/cve/CVE-2014-8142
suse.com/security/cve/CVE-2014-9652
suse.com/security/cve/CVE-2014-9705
suse.com/security/cve/CVE-2014-9709
suse.com/security/cve/CVE-2015-0231
suse.com/security/cve/CVE-2015-0232
suse.com/security/cve/CVE-2015-2301
suse.com/security/cve/CVE-2015-2305
suse.com/security/cve/CVE-2015-2783
suse.com/security/cve/CVE-2015-2787
suse.com/security/cve/CVE-2015-3329
suse.com/security/cve/CVE-2015-3411
suse.com/security/cve/CVE-2015-3412
suse.com/security/cve/CVE-2015-4021
suse.com/security/cve/CVE-2015-4022
suse.com/security/cve/CVE-2015-4024
suse.com/security/cve/CVE-2015-4026
suse.com/security/cve/CVE-2015-4148
suse.com/security/cve/CVE-2015-4598
suse.com/security/cve/CVE-2015-4599
suse.com/security/cve/CVE-2015-4600
suse.com/security/cve/CVE-2015-4601
suse.com/security/cve/CVE-2015-4602
suse.com/security/cve/CVE-2015-4603
suse.com/security/cve/CVE-2015-4643
suse.com/security/cve/CVE-2015-4644
suse.com/support/update/announcement/2015/suse-su-20150436-1
suse.com/support/update/announcement/2015/suse-su-20151018-1
suse.com/support/update/announcement/2015/suse-su-20151265-1
suse.com/security/cve/CVE-2006-7243
suse.com/security/cve/CVE-2010-2225
suse.com/security/cve/CVE-2010-2950
suse.com/security/cve/CVE-2010-3436
suse.com/security/cve/CVE-2010-3709
suse.com/security/cve/CVE-2010-3710
suse.com/security/cve/CVE-2010-4150
suse.com/security/cve/CVE-2010-4645
suse.com/security/cve/CVE-2011-0420
suse.com/security/cve/CVE-2011-0421
suse.com/security/cve/CVE-2011-0708
suse.com/security/cve/CVE-2011-1092
suse.com/security/cve/CVE-2011-1153
suse.com/security/cve/CVE-2011-1466
suse.com/security/cve/CVE-2011-2202
suse.com/security/cve/CVE-2011-3379
suse.com/security/cve/CVE-2011-4153
suse.com/security/cve/CVE-2011-4566
suse.com/security/cve/CVE-2011-4718
suse.com/security/cve/CVE-2011-4885
suse.com/security/cve/CVE-2012-0830
suse.com/security/cve/CVE-2012-1823
suse.com/security/cve/CVE-2012-2311
suse.com/security/cve/CVE-2012-2335
suse.com/security/cve/CVE-2012-2336
suse.com/security/cve/CVE-2012-2688
suse.com/security/cve/CVE-2012-3365
suse.com/security/cve/CVE-2013-1635
suse.com/security/cve/CVE-2013-1643
suse.com/security/cve/CVE-2013-1824
suse.com/security/cve/CVE-2013-7327
suse.com/security/cve/CVE-2013-7345
suse.com/security/cve/CVE-2014-0185
Left out here: 64 references. The JSON record has them.