CVE-2007-1864
Fixed in a distro release EPSS 3%
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
Products: php, debian_linux, canonical ubuntu_linux, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | php4 | 4:4.3.10-22 |
| Debian 4.0 | php4 | 6:4.4.4-8+etch4 |
| Debian 4.0 | php5 | 5.2.0-8+etch7 |
| Red Hat Enterprise Linux 4 | php | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-debuginfo | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-devel | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-domxml | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-gd | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-imap | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-ldap | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-mbstring | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-mysql | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-ncurses | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-odbc | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-pear | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-pgsql | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-snmp | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 4 | php-xmlrpc | 0:4.3.9-3.22.5 |
| Red Hat Enterprise Linux 5 | php | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-bcmath | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-cli | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-common | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-dba | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-debuginfo | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-devel | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-gd | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-imap | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-ldap | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-mbstring | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-mysql | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-ncurses | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-odbc | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-pdo | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-pgsql | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-snmp | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-soap | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-xml | 0:5.1.6-12.el5 |
| Red Hat Enterprise Linux 5 | php-xmlrpc | 0:5.1.6-12.el5 |
| Red Hat rhel application stack 1 | php | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-bcmath | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-cli | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-common | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-dba | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-debuginfo | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-devel | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-gd | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-imap | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-ldap | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-mbstring | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-mysql | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-ncurses | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-odbc | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-pdo | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-pgsql | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-snmp | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-soap | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-xml | 0:5.1.6-3.el4s1.7 |
| Red Hat rhel application stack 1 | php-xmlrpc | 0:5.1.6-3.el4s1.7 |