CVE catalog
CVE-2010-0397
php5 - null pointer dereference
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 11.53% · Oct 25, 2026
The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument. php: NULL pointer dereference in XML-RPC extension This issue was addressed in the php packages as shipped with Red Hat Enterprise Linux 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2010-0919.html The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | php5 | 5.0 | 5.2.6.dfsg.1-1+lenny2 | vulnerable |
| Debian | php5 | 5.0 | 5.2.6.dfsg.1-1+lenny3 | vulnerable |
| Debian | php5 | 5.0 | 5.2.6.dfsg.1-1+lenny4 | vulnerable |
| Debian | php5 | 5.0 | 5.2.6.dfsg.1-1+lenny6 | vulnerable |
| Debian | php5 | 5.0 | 5.2.6.dfsg.1-1+lenny8 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | php5 | deb | 5.0 | 5.2.6.dfsg.1-1+lenny8 | Not reported | DSA-2018-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: