CVE catalog

CVE-2007-1864

php5 - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.92% · Oct 25, 2026

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors. php libxmlrpc library overflow

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianphp43.14:4.3.10-15vulnerable
Debianphp43.14:4.3.10-16vulnerable
Debianphp43.14:4.3.10-17vulnerable
Debianphp43.14:4.3.10-18vulnerable
Debianphp43.14:4.3.10-19vulnerable
Debianphp43.14:4.3.10-20vulnerable
Debianphp43.14:4.3.10-21vulnerable
Debianphp43.14:4.3.10-22fixed
Debianphp44.06:4.4.4-8+etch1vulnerable
Debianphp44.06:4.4.4-8+etch2vulnerable
Debianphp44.06:4.4.4-8+etch3vulnerable
Debianphp44.06:4.4.4-8+etch4fixed
Debianphp54.05.2.0-8+etch1vulnerable
Debianphp54.05.2.0-8+etch3vulnerable
Debianphp54.05.2.0-8+etch4vulnerable
Debianphp54.05.2.0-8+etch5~pu1vulnerable
Debianphp54.05.2.0-8+etch6vulnerable
Debianphp54.05.2.0-8+etch7fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianphp4deb3.14:4.3.10-22Not reportedDSA-1331-1Not reported
Debianphp4deb4.06:4.4.4-8+etch4Not reportedDSA-1331-1Not reported
Debianphp5deb4.05.2.0-8+etch7Not reportedDSA-1330-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References