{"id":"CVE-2014-5120","aliases":["EUVD-2014-5018","GHSA-3wv8-w3p3-hq59","MGASA-2014-0367","RHSA-2014:1327","RHSA-2014:1765","RHSA-2014:1766","openSUSE-SU-2024:10290-1","openSUSE-SU-2024:10344-1"],"status":"published","title":"gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...","description":"gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.16934,"percentile":0.97079,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2014-08-23T01:00:00Z","modified":"2026-06-29T10:07:43Z","affected":[{"source":"osv","ecosystem":"Mageia:3","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.32-1.mga3"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:3","package":"php-apc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.14-7.12.mga3"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:3","package":"php-gd-bundled","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.32-1.mga3"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.16-1.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"php-apc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.15-4.7.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php55-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php55-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.6-13.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.14-1.4"}]}],"bundled":70},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.28-1.1"}]}],"bundled":71}],"products":[{"vendor":"php","product":"php"}],"references":[{"url":"https://support.apple.com/HT204659","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1766.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugs.php.net/bug.php?id=67730","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://php.net/ChangeLog-5.php","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1327.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1765.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5120","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3wv8-w3p3-hq59"},{"url":"https://advisories.mageia.org/MGASA-2014-0367.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13964","tags":["report"]},{"url":"http://php.net/ChangeLog-5.php#5.4.32","tags":["web"]},{"url":"http://php.net/ChangeLog-5.php#5.5.16","tags":["web"]},{"url":"http://www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2014%3A172/","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1327","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1128587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132793","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1327.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2497","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2497","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2497","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3478","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3538","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3538","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3587","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4670","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4670","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4670","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4698","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-5120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5120","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1765","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1035670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1107544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1108447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1155071","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1765.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7345","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0237","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0237","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0238","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0238","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1943","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2270","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2270","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3479","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3487","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3487","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3515","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3668","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3668","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3669","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3669","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3669","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3670","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3670","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3670","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4049","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4721","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1766","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1766.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4024","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-5120","description":"gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.","status":"published","published":"2014-08-23T01:00:00Z","modified":"2024-08-06T11:34:37.424Z","updated_at":"2026-11-02T14:33:41.889751Z"}],"euvd":[{"id":"EUVD-2014-5018","description":"gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.","status":"published","published":"2014-08-23T01:00:00Z","modified":"2024-08-06T11:34:37Z","updated_at":"2026-11-03T01:57:04.299217Z"}],"ghsa":[{"id":"GHSA-3wv8-w3p3-hq59","title":"gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...","description":"gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.","status":"published","published":"2022-05-17T03:47:53Z","modified":"2023-01-27T05:08:17Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:43:16.659055Z"}],"nvd":[{"id":"CVE-2014-5120","description":"gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.","status":"published","published":"2014-08-23T01:55:02.103Z","modified":"2026-06-17T00:11:05.52Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:55.19899Z"}],"osv":[{"id":"MGASA-2014-0367","title":"Updated php packages fix multiple security vulnerabilities","description":"Updated php packages fix security vulnerabilities:\n\nInteger overflow in the cdf_read_property_info function in cdf.c\nin file through 5.19, as used in the Fileinfo component in PHP\nbefore 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to\ncause a denial of service (application crash) via a crafted CDF\nfile. NOTE: this vulnerability exists because of an incomplete fix\nfor CVE-2012-1571 (CVE-2014-3587).\n\nMultiple buffer overflows in the php_parserr function in\next/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow\nremote DNS servers to cause a denial of service (application crash)\nor possibly execute arbitrary code via a crafted DNS record, related\nto the dns_get_record function and the dn_expand function. NOTE:\nthis issue exists because of an incomplete fix for CVE-2014-4049\n(CVE-2014-3597).\n\ngd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x\nbefore 5.5.16 does not ensure that pathnames lack \\%00 sequences,\nwhich might allow remote attackers to overwrite arbitrary files\nvia crafted input to an application that calls the (1) imagegd, (2)\nimagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp,\nor (7) imagewebp function (CVE-2014-5120).\n\nThe php packages have been updated to 5.4.32 for Mageia 3 and 5.5.16 for\nMageia 4, fixing these issues and several other bugs.\n\nNote that the CVE-2014-5120 issue is only relevant for the php-gd-bundled\npackage in Mageia 3.\n\nAlso, php-apc has been rebuilt against the updated php packages.\n","status":"published","published":"2014-09-05T09:07:37Z","modified":"2026-04-16T06:25:56.07726262Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10290-1","title":"apache2-mod_php7-7.0.14-1.4 on GA media","description":"These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:03.261343Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10344-1","title":"apache2-mod_php5-5.6.28-1.1 on GA media","description":"These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:15.40421Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2014:1327","title":"Red Hat Security Advisory: php security update","status":"published","published":"2024-09-13T09:20:24Z","modified":"2026-06-29T10:07:31Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1765","title":"Red Hat Security Advisory: php54-php security update","status":"published","published":"2024-09-13T09:19:46Z","modified":"2026-06-29T10:07:42Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1766","title":"Red Hat Security Advisory: php55-php security update","status":"published","published":"2024-09-13T09:19:52Z","modified":"2026-06-29T10:07:43Z","updated_at":"2026-11-02T15:53:02.532052Z"}]}}