Known vulnerabilities in php5 (Alpine package)

Known vulnerabilities in php5 (Alpine package)

Vendor: Alpine Linux Development Team

Software: php5 (Alpine package)

Software CPE: cpe:2.3:o:alpine:php5_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 16

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU16914 - NULL Pointer Dereference CVE-2018-19935	CWE-476	Low	No	No	5.6.40-r0	10.01.2019	SB2019011006 SB2018072423 SB2018072424 and 2 more
#VU16316 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2018-19158	CWE-78	Low	No	No	5.6.40-r0	07.12.2018	SB2018120716 SB2018120830
#VU15292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-17082	CWE-79	Low	No	No	5.6.38-r0, 5.6.40-r0	10.10.2018	SB2018101016 SB2018100601 SB2018100602 and 9 more
#VU13916 - Heap-based Buffer Overflow CVE-2018-14851	CWE-122	Low	No	No	5.6.38-r0, 5.6.40-r0	19.07.2018	SB2018071908 SB2018121101 SB2018091805 and 4 more
#VU13915 - Integer overflow CVE-2018-14883	CWE-122	Low	No	No	5.6.38-r0, 5.6.40-r0	19.07.2018	SB2018071908 SB2018121101 SB2018091805 and 4 more
#VU12327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-10547	CWE-79	Low	No	No	-	01.05.2018	SB2018042612 SB2018050902 SB2018051104 and 12 more
#VU10800 - Stack-based buffer overflow CVE-2018-7584	CWE-121	Low	No	No	5.6.36-r0	01.03.2018	SB2018030106 SB2018030803 SB2018032605 and 10 more
#VU10390 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-5711	CWE-835	Low	No	No	5.6.33-r0	07.02.2018	SB2018020401 SB2018020703 SB2018020902 and 13 more
#VU10389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-5712	CWE-79	Low	No	No	5.6.33-r0	06.02.2018	SB2018020401 SB2018020703 SB2018020902 and 14 more
#VU7574 - Integer underflow CVE-2016-10166	CWE-191	High	No	No	5.6.40-r0	19.07.2017	SB2017071905 SB2019011006 SB2017022702 and 6 more
#VU7349 - NULL Pointer Dereference CVE-2017-9229	CWE-476	Low	No	No	5.6.31-r0	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 17 more
#VU7348 - Out-of-bounds write CVE-2017-9228	CWE-787	High	No	No	5.6.31-r0	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 17 more
#VU7347 - Out-of-bounds read CVE-2017-9227	CWE-125	Low	No	No	5.6.31-r0	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 14 more
#VU7346 - Out-of-bounds write CVE-2017-9226	CWE-787	High	No	No	5.6.31-r0, 5.6.33-r0	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 14 more
#VU7345 - Out-of-bounds read CVE-2017-9224	CWE-125	Low	No	No	5.6.31-r0, 5.6.33-r0	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 15 more
#VU33236 - Heap-based Buffer Overflow CVE-2016-1283	CWE-122	High	No	No	5.6.32-r0	03.01.2016	SB2016010301 SB2016050927 SB2016050928 and 8 more