Known vulnerabilities in php (Alpine package)

Vendor: Alpine Linux Development Team
Software: php (Alpine package)
Software CPE: cpe:2.3:o:alpine:php_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 41
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php (Alpine package) php (Alpine package) is affected by 41 known vulnerabilities: 2 critical, 13 high, 13 medium, 13 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16096 - Memory corruption
CVE-2014-3597		 CWE-119 High
No
No
 5.5.16-r0 27.11.2018 SB2015090901
SB2014090111
SB2014090503
and 1 more
#VU16093 - Use After Free
CVE-2014-4670		 CWE-416 Low
No
No
 5.5.15-r0 27.11.2018 SB2015070903
SB2014072508
SB2014090503
and 1 more
#VU13112 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-3152		 CWE-300 Low
No
No
 5.5.27-r0 31.05.2018 SB2018053109
SB2015072805
SB2015081704
and 4 more
#VU7349 - NULL Pointer Dereference
CVE-2017-9229		 CWE-476 Low
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7348 - Out-of-bounds write
CVE-2017-9228		 CWE-787 High
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7347 - Out-of-bounds read
CVE-2017-9227		 CWE-125 Low
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7346 - Out-of-bounds write
CVE-2017-9226		 CWE-787 High
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7345 - Out-of-bounds read
CVE-2017-9224		 CWE-125 Low
No
No
 5.6.31-r0 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 15 more
#VU529 - Improper Access Control
CVE-2016-7411		 CWE-284 High
No
No
 5.6.27-r0 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 8 more
#VU528 - Improper Access Control
CVE-2016-7418		 CWE-284 High
No
No
 5.6.27-r0 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU527 - Improper Access Control
CVE-2016-7413		 CWE-284 High
No
No
 5.6.27-r0 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU526 - Improper Access Control
CVE-2016-7417		 CWE-284 High
No
No
 5.6.27-r0 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU525 - Improper Access Control
CVE-2016-7414		 CWE-284 High
No
No
 5.6.27-r0 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU524 - Improper Access Control
CVE-2016-7412		 CWE-284 High
No
No
 5.6.27-r0 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU523 - Improper Access Control
CVE-2016-7416		 CWE-284 High
No
No
 5.6.27-r0 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU32405 - Improper input validation
CVE-2015-5589		 CWE-20 High
No
No
 5.5.27-r0 16.05.2016 SB2016051610
SB2015072806
SB2015081704
and 3 more
#VU3891 - Integer overflow
CVE-2014-3587		 CWE-190 Low
No
No
 5.5.16-r0 01.04.2016 SB2015090901
SB2014090110
SB2014091920
and 2 more
#VU32406 - Stack-based buffer overflow
CVE-2015-5590		 CWE-121 Medium
No
No
 5.5.27-r0 19.01.2016 SB2016011911
SB2015072807
SB2015081704
and 3 more
#VU32501 - Improper input validation
CVE-2014-5120		 CWE-20 Medium
No
No
 5.5.16-r0 23.08.2014 SB2014082301
SB2014090112
SB2014091920
and 2 more
#VU33295 - NULL Pointer Dereference
CVE-2014-2497		 CWE-476 Medium
No
No
 5.5.16-r0 21.03.2014 SB2014032102
SB2014090109
SB2014070709
and 8 more


Showing elements 1 - 20 out of 41