Known vulnerabilities in php5 (Ubuntu package) 5.3.10-1ubuntu3

Version: 5.3.10-1ubuntu3
Software CPE: cpe:2.3:o:canonical:php5_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 13
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting php5 (Ubuntu package) version 5.3.10-1ubuntu3 php5 (Ubuntu package) 5.3.10-1ubuntu3 is affected by 13 vulnerabilities: 2 critical, 3 high, 8 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU9717 - Buffer over-read
CVE-2017-11147
CWE-126 Low
No
No
5.3.10-1ubuntu3.28 22.12.2017 SB2017121805
SB2018050311
#VU9716 - Improper Access Control
CVE-2017-11144
CWE-284 Low
No
No
5.3.10-1ubuntu3.28 22.12.2017 SB2017121805
SB2018011105
SB2018011106
and 1 more
#VU9695 - Deserialization of Untrusted Data
CVE-2017-11143
CWE-502 Low
No
No
5.3.10-1ubuntu3.28 19.12.2017 SB2017121805
SB2018011106
SB2018050311
#VU9694 - Improper input validation
CVE-2016-10397
CWE-20 Low
No
No
5.3.10-1ubuntu3.28 19.12.2017 SB2017121805
#VU8965 - Out-of-bounds read
CVE-2017-11145
CWE-125 Low
No
No
5.3.10-1ubuntu3.28 27.10.2017 SB2017102708
SB2017121805
SB2018011105
and 2 more
#VU7356 - Stack-based buffer overflow
CVE-2017-11628
CWE-121 High
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017092402
SB2017121805
and 3 more
#VU7349 - NULL Pointer Dereference
CVE-2017-9229
CWE-476 Low
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7348 - Out-of-bounds write
CVE-2017-9228
CWE-787 High
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7347 - Out-of-bounds read
CVE-2017-9227
CWE-125 Low
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7346 - Out-of-bounds write
CVE-2017-9226
CWE-787 High
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7345 - Out-of-bounds read
CVE-2017-9224
CWE-125 Low
No
No
5.3.10-1ubuntu3.28 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 15 more
#VU5939 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-2311
CWE-78 Critical
Public exploit available
No
5.3.2-1ubuntu4.15, 5.3.10-1ubuntu3.1 14.03.2017 SB2012050601
SB2015050401
SB2012050701
and 5 more
#VU4201 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-1823
CWE-78 Critical
Public exploit available
Exploited
5.3.2-1ubuntu4.15, 5.3.10-1ubuntu3.1 11.01.2017 SB2012050301
SB2015050401
SB2012050901
and 11 more