Known vulnerabilities in php5 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:php5_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 97
Public exploits: 11
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php5 (Ubuntu package) php5 (Ubuntu package) is affected by 97 known vulnerabilities: 2 critical, 28 high, 1 medium, 66 low Critical High Medium Low

Vulnerabilities (97)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU13916 - Heap-based Buffer Overflow
CVE-2018-14851
CWE-122 Low
No
No
5.5.9+dfsg-1ubuntu4.26 19.07.2018 SB2018071908
SB2018121101
SB2018091805
and 4 more
#VU13915 - Integer overflow
CVE-2018-14883
CWE-122 Low
No
No
5.5.9+dfsg-1ubuntu4.26 19.07.2018 SB2018071908
SB2018121101
SB2018091805
and 4 more
#VU10948 - Improper input validation
CVE-2016-10712
CWE-20 Low
No
No
5.5.9+dfsg-1ubuntu4.24 13.03.2018 SB2016011001
SB2018022401
SB2018022313
and 2 more
#VU10880 - Resource exhaustion
CVE-2015-9253
CWE-400 Low
No
No
5.5.9+dfsg-1ubuntu4.26 07.03.2018 SB2018021618
SB2018091805
SB2020021722
and 3 more
#VU10800 - Stack-based buffer overflow
CVE-2018-7584
CWE-121 Low
No
No
5.5.9+dfsg-1ubuntu4.24 01.03.2018 SB2018030106
SB2018030803
SB2018032605
and 10 more
#VU10389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5712
CWE-79 Low
No
No
5.5.9+dfsg-1ubuntu4.23, 5.5.9+dfsg-1ubuntu4.24 06.02.2018 SB2018020401
SB2018020703
SB2018020902
and 14 more
#VU9956 - Deserialization of Untrusted Data
CVE-2017-12933
CWE-502 Low
No
No
5.5.9+dfsg-1ubuntu4.23 09.01.2018 SB2018011105
SB2018011106
SB2018021207
and 1 more
#VU9717 - Buffer over-read
CVE-2017-11147
CWE-126 Low
No
No
5.3.10-1ubuntu3.28 22.12.2017 SB2017121805
SB2018050311
#VU9716 - Improper Access Control
CVE-2017-11144
CWE-284 Low
No
No
5.3.10-1ubuntu3.28 22.12.2017 SB2017121805
SB2018011105
SB2018011106
and 1 more
#VU9695 - Deserialization of Untrusted Data
CVE-2017-11143
CWE-502 Low
No
No
5.3.10-1ubuntu3.28 19.12.2017 SB2017121805
SB2018011106
SB2018050311
#VU9694 - Improper input validation
CVE-2016-10397
CWE-20 Low
No
No
5.3.10-1ubuntu3.28 19.12.2017 SB2017121805
#VU8968 - Out-of-bounds read
CVE-2017-16642
CWE-125 Low
Available
No
5.5.9+dfsg-1ubuntu4.23 27.10.2017 SB2017102708
SB2018011105
SB2018011106
and 2 more
#VU8965 - Out-of-bounds read
CVE-2017-11145
CWE-125 Low
No
No
5.3.10-1ubuntu3.28 27.10.2017 SB2017102708
SB2017121805
SB2018011105
and 2 more
#VU7356 - Stack-based buffer overflow
CVE-2017-11628
CWE-121 High
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017092402
SB2017121805
and 3 more
#VU7349 - NULL Pointer Dereference
CVE-2017-9229
CWE-476 Low
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7348 - Out-of-bounds write
CVE-2017-9228
CWE-787 High
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7347 - Out-of-bounds read
CVE-2017-9227
CWE-125 Low
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7346 - Out-of-bounds write
CVE-2017-9226
CWE-787 High
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7345 - Out-of-bounds read
CVE-2017-9224
CWE-125 Low
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 15 more
#VU16135 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2016-7478
CWE-835 Low
Available
No
5.3.10-1ubuntu3.26, 5.5.9+dfsg-1ubuntu4.21 14.02.2017 SB2017021411
SB2017022702


Showing elements 1 - 20 out of 97