CVE-2007-0988
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64...
4.3 Medium
CVE-2007-0988 is a medium vulnerability (CVSS 4.3) in Php, published February 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 2.40%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
Exploit likelihood
2.40%Down 0.3 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php4Debian:3.1 From an advisory covering 6 CVEs | before 4:4.3.10-19, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-18 | 4:4.3.10-19 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
Show 184 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-cliRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-commonRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
stronghold-phpRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-develRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-imapRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-ldapRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-manualRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-mysqlRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-odbcRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-pgsqlRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-snmpRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
What each source reports
NVD Score used
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
- Record
CVE-2007-0988- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
- Record
CVE-2007-0988- Updated
- 2026-11-02
EUVDEUVD-2007-0982No score
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
- Record
EUVD-2007-0982- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rv23-gf9q-6frcNo score
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64...
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
- Record
GHSA-rv23-gf9q-6frc- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
us.debian.org/security/2007/dsa-1264
secunia.com/advisories/24295
trustix.org/errata/2007/0009
openpkg.com/security/advisories/OpenPKG-SA-2007.010.html
vupen.com/english/advisories/2007/1991
Show 96 moreShow less
securitytracker.com/id?1017671
php-security.org/MOPB/MOPB-05-2007.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506
php.net/releases/5_2_1.php
securityreason.com/securityalert/2315
exchange.xforce.ibmcloud.com/vulnerabilities/32709
support.avaya.com/elmodocs2/security/ASA-2007-101.htm
issues.rpath.com/browse/RPL-1088
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092
ubuntu.com/usn/usn-424-2
osvdb.org/32762
security.gentoo.org/glsa/glsa-200703-21.xml
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858
redhat.com/support/errata/RHSA-2007-0076.html
rhn.redhat.com/errata/RHSA-2007-0089.html
securityfocus.com/archive/1/461462/100/0/threaded
mandriva.com/security/advisories?name=MDKSA-2007:048
novell.com/linux/security/advisories/2007_32_php.html
nvd.nist.gov/vuln/detail/CVE-2007-0988
github.com/advisories/GHSA-rv23-gf9q-6frc
access.redhat.com/errata/RHSA-2007:0076
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0076.json
cve.org/CVERecord?id=CVE-2007-0906