Every CVE Search/ Get API key

CVE-2010-0397

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...

5.0 MediumPublic exploitFix available

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.

Exploit likelihood

11.5%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.

Record
CVE-2010-0397
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.

Record
CVE-2010-0397
Updated
2026-11-02
EUVDEUVD-2010-0428 No score

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.

Record
EUVD-2010-0428
Updated
2026-11-03
GitHub AdvisoriesGHSA-vqgq-wj7q-x376 No score

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.

Record
GHSA-vqgq-wj7q-x376
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php5
Debian:5.0
 before 5.2.6.dfsg.1-1+lenny8, plus listed versions
5.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny6
5.2.6.dfsg.1-1+lenny8
php
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-domxml
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-gd
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-imap
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-ldap
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mbstring
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mysql
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
Show 91 moreShow less
Affected packages
PackageAffectedFixed
php-ncurses
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-odbc
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pear
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pgsql
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-snmp
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-xmlrpc
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-domxml
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-gd
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-imap
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-ldap
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mbstring
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mysql
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-ncurses
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-odbc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pear
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pgsql
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-snmp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-xmlrpc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-domxml
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-gd
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-imap
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-ldap
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mbstring
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mysql
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-ncurses
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-odbc
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pear
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pgsql
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-snmp
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-xmlrpc
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-domxml
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-gd
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-imap
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-ldap
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mbstring
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-mysql
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-ncurses
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-odbc
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pear
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-pgsql
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-snmp
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php-xmlrpc
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:4.3.9-3.31
0:4.3.9-3.31
php
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-common
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-ncurses
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3
php-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:5.1.6-27.el5_5.3
0:5.1.6-27.el5_5.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 5.3.2 'xmlrpc' Extension - Multiple Remote Denial of Service Vulnerabilities2010-03-12

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0397 is a medium vulnerability (CVSS 5.0) in Php, published March 16, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.5%, the 96th percentile. Fixed in php5 5.2.6.dfsg.1-1+lenny8.

References

Show 41 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open