CVE-2006-4486
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit...
2.6 Low
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
Exploit likelihood
2.36%Down 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
- Record
CVE-2006-4486- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
- Record
CVE-2006-4486- Updated
- 2026-11-02
EUVDEUVD-2006-4474 No score
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
- Record
EUVD-2006-4474- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wmm8-4p47-889q No score
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit...
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
- Record
GHSA-wmm8-4p47-889q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php4Debian:3.1 From an advisory covering 3 CVEs |
before 4:4.3.10-22, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-194:4.3.10-204:4.3.10-21 |
4:4.3.10-22 |
php4Debian:4.0 From an advisory covering 3 CVEs |
before 6:4.4.4-8+etch4, plus listed versions 6:4.4.4-8+etch16:4.4.4-8+etch26:4.4.4-8+etch3 |
6:4.4.4-8+etch4 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
Show 102 moreShow less
| Package | Affected | Fixed |
|---|---|---|
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-36.ent | 0:4.3.2-36.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.18 | 0:4.3.9-3.18 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs |
before 0:5.1.4-1.el4s1.4 | 0:5.1.4-1.el4s1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4486 is a low vulnerability (CVSS 2.6) in Php, published August 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.36%, the 83rd percentile. No source names a fixed version.
References
securitytracker.com/id?1016984
issues.rpath.com/browse/RPL-683
redhat.com/support/errata/RHSA-2006-0669.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086
secunia.com/advisories/22487
support.avaya.com/elmodocs2/security/ASA-2006-221.htm
Show 64 moreShow less
turbolinux.com/security/2006/TLSA-2006-38.txt
rhn.redhat.com/errata/RHSA-2006-0688.html
hardened-php.net/hphp/changelog.html
ubuntu.com/usn/usn-362-1
securityfocus.com/bid/19582
php.net/ChangeLog-5.php
debian.org/security/2007/dsa-1331
novell.com/linux/security/advisories/2006_52_php.html
nvd.nist.gov/vuln/detail/CVE-2006-4486
github.com/advisories/GHSA-wmm8-4p47-889q
access.redhat.com/errata/RHSA-2006:0669
bugzilla.redhat.com/show_bug.cgi?id=201766
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0669.json
cve.org/CVERecord?id=CVE-2006-3016