Known vulnerabilities in php (Alpine package)

Vendor: Alpine Linux Development Team
Software: php (Alpine package)
Software CPE: cpe:2.3:o:alpine:php_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 41
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php (Alpine package) php (Alpine package) is affected by 41 known vulnerabilities: 2 critical, 13 high, 13 medium, 13 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16096 - Memory corruption
CVE-2014-3597		 CWE-119 High
No
No
 5.5.16-r0 27.11.2018 SB2015090901
SB2014090111
SB2014090503
and 1 more
#VU16095 - Type confusion
CVE-2014-4721		 CWE-843 Low
No
No
 5.3.28-r6 27.11.2018 SB2015070903
SB2014071704
#VU16093 - Use After Free
CVE-2014-4670		 CWE-416 Low
No
No
 5.5.15-r0 27.11.2018 SB2015070903
SB2014072508
SB2014090503
and 1 more
#VU16086 - Heap-based Buffer Overflow
CVE-2014-4049		 CWE-122 High
No
No
 5.3.28-r5 27.11.2018 SB2015062304
SB2014062308
SB2014070709
and 9 more
#VU16085 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2014-0238		 CWE-835 Low
No
No
 5.3.28-r4 27.11.2018 SB2015062304
SB2014061501
SB2014061502
and 6 more
#VU16084 - Permissions, Privileges, and Access Controls
CVE-2014-0237		 CWE-264 Low
No
No
 5.3.28-r4 27.11.2018 SB2015062304
SB2014061501
SB2014061502
and 6 more
#VU16083 - Permissions, Privileges, and Access Controls
CVE-2014-0185		 CWE-264 Low
No
No
 5.3.28-r3 27.11.2018 SB2015062304
SB2014061001
SB2014052805
and 1 more
#VU16079 - NULL Pointer Dereference
CVE-2013-7327		 CWE-476 Low
No
No
 5.5.11-r0 27.11.2018 SB2015030301
SB2014032502
SB2014041717
and 1 more
#VU13112 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-3152		 CWE-300 Low
No
No
 5.5.27-r0 31.05.2018 SB2018053109
SB2015072805
SB2015081704
and 4 more
#VU7349 - NULL Pointer Dereference
CVE-2017-9229		 CWE-476 Low
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 18 more
#VU7348 - Out-of-bounds write
CVE-2017-9228		 CWE-787 High
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 18 more
#VU7347 - Out-of-bounds read
CVE-2017-9227		 CWE-125 Low
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 15 more
#VU7346 - Out-of-bounds write
CVE-2017-9226		 CWE-787 High
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 15 more
#VU7345 - Out-of-bounds read
CVE-2017-9224		 CWE-125 Low
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 16 more
#VU32405 - Improper input validation
CVE-2015-5589		 CWE-20 High
No
No
 5.5.27-r0 16.05.2016 SB2016051610
SB2015072806
SB2015081704
and 3 more
#VU3891 - Integer overflow
CVE-2014-3587		 CWE-190 Low
No
No
 5.5.16-r0 01.04.2016 SB2015090901
SB2014090110
SB2014091920
and 3 more
#VU32406 - Stack-based buffer overflow
CVE-2015-5590		 CWE-121 Medium
No
No
 5.5.27-r0 19.01.2016 SB2016011911
SB2015072807
SB2015081704
and 3 more
#VU32501 - Improper input validation
CVE-2014-5120		 CWE-20 Medium
No
No
 5.5.16-r0 23.08.2014 SB2014082301
SB2014090112
SB2014091920
and 2 more
#VU32500 - Improper input validation
CVE-2014-3538		 CWE-20 Medium
No
No
 5.5.16-r0 03.07.2014 SB2014070302
SB2014072101
SB2014072102
and 3 more
#VU32548 - Permissions, Privileges, and Access Controls
CVE-2013-7345		 CWE-264 Medium
No
No
 5.3.28-r2 24.03.2014 SB2014032402
SB2014041813
SB2014072304
and 9 more


Showing elements 1 - 20 out of 41