CVE-2010-2950
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...
6.8 Medium
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
Exploit likelihood
5.69%Up 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
- Record
CVE-2010-2950- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
- Record
CVE-2010-2950- Updated
- 2026-11-02
EUVDEUVD-2010-2954 No score
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
- Record
EUVD-2010-2954- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-95f3-2wqm-398g No score
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
- Record
GHSA-95f3-2wqm-398g- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10290-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10344-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11169-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
Show 145 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-imapRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php53Red Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-intlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-processRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53Red Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-cliRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-commonRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-dbaRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-gdRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-imapRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-intlRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-ldapRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-odbcRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pdoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-processRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pspellRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-snmpRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-soapRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php7openSUSE:Tumbleweed From an advisory covering 70 CVEs |
before 7.0.14-1.4 | 7.0.14-1.4 |
php5openSUSE:Tumbleweed From an advisory covering 71 CVEs |
before 5.6.28-1.1 | 5.6.28-1.1 |
php8openSUSE:Tumbleweed From an advisory covering 97 CVEs |
before 8.0.11-1.1 | 8.0.11-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2950 is a medium vulnerability (CVSS 6.8) in Php, published September 28, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.69%, the 93rd percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=130331363227777&w=2
php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html
php.net/releases/5_3_4.php
lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
security-tracker.debian.org/tracker/CVE-2010-2950
Show 165 moreShow less
mandriva.com/security/advisories?name=MDVSA-2010:254
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
bugzilla.redhat.com/show_bug.cgi?id=598537
svn.php.net/viewvc?view=revision&revision=302565
support.apple.com/kb/HT4581
nvd.nist.gov/vuln/detail/CVE-2010-2950
github.com/advisories/GHSA-95f3-2wqm-398g
access.redhat.com/errata/RHSA-2012:1046
rhn.redhat.com/errata/RHSA-2012-0546.html
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1046.json
cve.org/CVERecord?id=CVE-2010-2950
suse.com/security/cve/CVE-2006-7243