Every CVESearch/Get API key

CVE-2006-7243

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...

5.0 Medium

CVE-2006-7243 is a medium vulnerability (CVSS 5.0) in Php, published January 18, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.36%, the 92nd percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
5.36%EPSS, 92nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.

Exploit likelihood

5.36%Up 2.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-bcmath
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-cli
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-common
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-dba
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-devel
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-embedded
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-enchant
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-fpm
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-gd
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
Show 217 moreShow less
Affected packages
PackageAffectedFixed
php-imap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-intl
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-ldap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mbstring
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mysql
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-odbc
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pdo
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pgsql
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-process
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pspell
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-recode
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-snmp
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-soap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-tidy
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xml
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xmlrpc
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-zts
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php53
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-intl
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-process
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-pspell
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-common
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-intl
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-process
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-pspell
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php53-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:5.3.3-21.el5
0:5.3.3-21.el5
php
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-bcmath
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-cli
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-common
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-dba
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-embedded
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-enchant
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-fpm
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-gd
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-imap
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-intl
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-ldap
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mbstring
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mysql
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-odbc
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pdo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pgsql
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-process
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pspell
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-recode
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-snmp
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-soap
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-tidy
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xml
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xmlrpc
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-zts
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-bcmath
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-dba
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-embedded
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-enchant
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-fpm
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-gd
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-imap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-intl
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-ldap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mbstring
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mysql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-odbc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pdo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pgsql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-process
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pspell
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-recode
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-snmp
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-soap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-tidy
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xml
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xmlrpc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-zts
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-cli
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-bcmath
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-dba
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-embedded
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-enchant
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-fpm
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-imap
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-intl
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mbstring
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-process
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pspell
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-recode
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-snmp
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-tidy
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-zts
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-cli
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-common
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-gd
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-ldap
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mysql
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-odbc
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pdo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pgsql
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-soap
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xml
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xmlrpc
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-bcmath
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-dba
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-embedded
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-enchant
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-fpm
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-imap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-intl
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mbstring
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-process
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pspell
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-recode
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-snmp
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-tidy
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-zts
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-cli
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-gd
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-ldap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-mysql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-odbc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pdo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-pgsql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-soap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xml
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php-xmlrpc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:5.3.3-26.el6
0:5.3.3-26.el6
php
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-common
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ncurses
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php53
SUSE:Linux Enterprise Server 11 SP2-LTSS
From an advisory covering 85 CVEs
before 5.3.17-47.1
5.3.17-47.1
php7
openSUSE:Tumbleweed
From an advisory covering 70 CVEs
before 7.0.14-1.4
7.0.14-1.4
php5
openSUSE:Tumbleweed
From an advisory covering 71 CVEs
before 5.6.28-1.1
5.6.28-1.1
php8
openSUSE:Tumbleweed
From an advisory covering 97 CVEs
before 8.0.11-1.1
8.0.11-1.1

What each source reports

NVD Score used5.0

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.

Record
CVE-2006-7243
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.

Record
CVE-2006-7243
Updated
2026-11-02
EUVDEUVD-2006-7220No score

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.

Record
EUVD-2006-7220
Updated
2026-11-03
GitHub AdvisoriesGHSA-qxh9-g3ww-hcvcNo score

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.

Record
GHSA-qxh9-g3ww-hcvc
Weakness
CWE-20
Updated
2026-11-02
OSVCLSA-2020-1605798462No score

Fix of 227 CVE

  • Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
  • Fix bug #70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()
  • Fix bug #70661: Use After Free Vulnerability in WDDX Packet Deserialization
  • Fix bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
  • Fix bug #71459: Integer overflow in iptcembed()
  • Fix bug #71039: exec functions ignore length but look for NULL termination
  • Fix bug #71354: Heap corruption in tar/zip/phar parser.
  • Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
  • Fix bug #71323: Output of stream_get_meta_data can be falsified by its input
  • Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  • Fix bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  • Fix bug #71860: Invalid memory write in phar on filename with \0 in name
  • Fix bug #71798: Integer Overflow in php_raw_url_encode
  • Fix bug #72837: integer overflow in bzdecompress caused heap corruption
  • Fix bug #72681: PHP Session Data Injection Vulnerability
  • Fix bug #72807: integer overflow in curl_escape caused heap corruption
  • Fix bug #72838: Integer overflow lead to heap corruption in sql_regcase
  • Fix bug #72697: select_colors write out-of-bounds
  • Fix bug #72730: imagegammacorrect allows arbitrary write access
  • Fix bug #72836: integer overflow in base64_decode caused heap corruption
  • Fix bug #72848: integer overflow in quoted_printable_encode caused heap corruption
  • Fix bug #72849: integer overflow in urlencode caused heap corruption
  • Fix bug #72850: integer overflow in php_uuencode caused heap corruption
  • Fix bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack
  • Fix bug #72749: wddx_deserialize allows illegal memory access
  • Fix bug #72750: wddx_deserialize null dereference
  • Fix bug #72790: wddx_deserialize null dereference with invalid xml
  • Fix bug #72799: wddx_deserialize null dereference in php_wddx_pop_element
  • Fix bug #73189: Memcpy negative size parameter php_resolve_path
  • Fix bug #73150: missing NULL check in dom_document_save_html
  • Fix bug #73284: heap overflow in php_ereg_replace function
  • Fix bug #73218: stack-buffer-overflow through "ResourceBundle" methods
  • Fix bug #73208: integer overflow in imap_8bit caused heap corruption
  • Fix bug #73082: string length overflow in mb_encode_* function
  • Fix bug #73174: heap overflow in php_pcre_replace_impl
  • Fix bug #73276: crash in openssl_random_pseudo_bytes function
  • Fix bug #73275: crash in openssl_encrypt function
  • Fix bug #73017: memory corruption in wordwrap function
  • Fix bug #73240: Write out of bounds at number_format
  • Fix bug #73073: CachingIterator null dereference when convert to string
  • Fix bug #73293: NULL pointer dereference in SimpleXMLElement::asXML()
  • Fix bug #73356: crash in bzcompress function
  • Fix bug #72696: imagefilltoborder stackoverflow on truecolor images
  • Fix bug #73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
  • Fix bug #73144: Use-after-free in ArrayObject Deserialization
  • Fix bug #73192: parse_url return wrong hostname
  • Fix bug #73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow
  • Fix bug #73452: Segfault (Regression for #69152)
  • Fix bug #73631: Invalid read when wddx decodes empty boolean element
  • Fix bug #67587: Redirection loop on nginx with FPM
  • Fix bug #71465: PHAR doesn't know about litespeed
  • Fix bug #73737: FPE when parsing a tag format
  • Fix bug #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  • Fix bug #73869: Signed Integer Overflow gd_io.c
  • Fix bug #73773: Seg fault when loading hostile phar
  • Fix bug #70436: Use After Free Vulnerability in unserialize()
  • Fix bug #74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  • Fix bug #72535: arcfour encryption stream filter crashes php
  • Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unseria
  • Fix bug #72455: Heap Overflow due to integer overflows
  • Fix bug #74782:…
Record
CLSA-2020-1605798462
Updated
2026-11-02
OSVopenSUSE-SU-2024:10290-1No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10290-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10344-1No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10344-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02
OSVSUSE-SU-2016:1638-1No score

Security update for php53

This update for php53 to version 5.3.17 fixes the following issues:

These security issues were fixed:

  • CVE-2016-5093: get_icu_value_internal out-of-bounds read (bnc#982010).
  • CVE-2016-5094: Don't create strings with lengths outside int range (bnc#982011).
  • CVE-2016-5095: Don't create strings with lengths outside int range (bnc#982012).
  • CVE-2016-5096: int/size_t confusion in fread (bsc#982013).
  • CVE-2016-5114: fpm_log.c memory leak and buffer overflow (bnc#982162).
  • CVE-2015-8879: The odbc_bindcols function in ext/odbc/php_odbc.c in PHP mishandles driver behavior for SQL_WVARCHAR columns, which allowed remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table (bsc#981050).
  • CVE-2015-4116: Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP allowed remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation (bsc#980366).
  • CVE-2015-8874: Stack consumption vulnerability in GD in PHP allowed remote attackers to cause a denial of service via a crafted imagefilltoborder call (bsc#980375).
  • CVE-2015-8873: Stack consumption vulnerability in Zend/zend_exceptions.c in PHP allowed remote attackers to cause a denial of service (segmentation fault) via recursive method calls (bsc#980373).
  • CVE-2016-4540: The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset (bsc#978829).
  • CVE-2016-4541: The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset (bsc#978829.
  • CVE-2016-4542: The exif_process_IFD_TAG function in ext/exif/exif.c in PHP did not properly construct spprintf arguments, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data (bsc#978830).
  • CVE-2016-4543: The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP did not validate IFD sizes, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data (bsc#978830.
  • CVE-2016-4544: The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP did not validate TIFF start data, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data (bsc#978830.
  • CVE-2016-4537: The bcpowmod function in ext/bcmath/bcmath.c in PHP accepted a negative integer for the scale argument, which allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call (bsc#978827).
  • CVE-2016-4538: The bcpowmod function in ext/bcmath/bcmath.c in PHP modified certain data structures without considering whether they are copies of the zero, one, or two global variable, which allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call (bsc#978827).
  • CVE-2016-4539: The xml_parse_into_struct function in ext/xml/xml.c in PHP allowed remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero (bsc#978828).
  • CVE-2016-4342: ext/phar/phar_object.c in PHP mishandles zero-length uncompressed data, which allowed remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive (bsc#977991).
  • CVE-2016-4346: Integer overflow in the str_pad function in…
Record
SUSE-SU-2016:1638-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 133 references and the rest of 2 source descriptions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open