Every CVE Search/ Get API key

CVE-2010-3710

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x...

4.3 MediumFix available

CVE-2010-3710 is a medium vulnerability (CVSS 4.3) in Php, published October 25, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. Fixed in php5 5.2.6.dfsg.1-1+lenny10.

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Exploit likelihood

3.09%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Record
CVE-2010-3710
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Record
CVE-2010-3710
Updated
2026-11-02
EUVDEUVD-2010-3692 No score

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Record
EUVD-2010-3692
Updated
2026-11-03
GitHub AdvisoriesGHSA-pwmp-3xxc-6mqj No score

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x...

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Record
GHSA-pwmp-3xxc-6mqj
Updated
2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10290-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10344-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php5
Debian:5.0
 before 5.2.6.dfsg.1-1+lenny10, plus listed versions
5.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9
5.2.6.dfsg.1-1+lenny10
php5
Debian:6.0
 before 5.3.3-7+squeeze1, plus listed versions
5.3.3-7
5.3.3-7+squeeze1
php53
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-bcmath
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-cli
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-common
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-dba
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-devel
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-gd
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
Show 17 moreShow less
Affected packages
PackageAffectedFixed
php53-imap
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-intl
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-ldap
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-mbstring
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-mysql
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-odbc
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-pdo
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-pgsql
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-process
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-pspell
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-snmp
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-soap
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-xml
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-xmlrpc
Red Hat:enterprise_linux:5::server
 before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php7
openSUSE:Tumbleweed
 before 7.0.14-1.4
7.0.14-1.4
php5
openSUSE:Tumbleweed
 before 5.6.28-1.1
5.6.28-1.1
php8
openSUSE:Tumbleweed
 before 8.0.11-1.1
8.0.11-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 145 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open