CVE catalog

CVE-2014-5011

php-dompdf: CVE-2014-5011

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.49% · Oct 25, 2026

DOMPDF before 0.6.2 allows Information Disclosure.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianphp-dompdfsid3.1.4+dfsg-2fixed
Debianphp-dompdfbookworm2.0.3+dfsg-1+deb12u1fixed
Ubuntuphp-dompdfpro0.6.2+dfsg-3vulnerable
Ubuntuphp-dompdfpro0.6.2+dfsg-3ubuntu0.18.04.1~esm1fixed
Ubuntuphp-dompdf20.040.6.2+dfsg-3vulnerable
Ubuntuphp-dompdf20.040.6.2+dfsg-3ubuntu0.20.04.1fixed
Ubuntuphp-dompdfpro0.6.1+dfsg-2vulnerable
Ubuntuphp-dompdfpro0.6.1+dfsg-2build1vulnerable
Ubuntuphp-dompdfpro0.6.1+dfsg-2ubuntu1vulnerable
Ubuntuphp-dompdfpro0.6.1+dfsg-2ubuntu1+esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianphp-dompdfsourcesid0.6.2+dfsg-1not yet assignedNot reported[813849]
Debianphp-dompdfsourcebookworm0.6.2+dfsg-1not yet assignedNot reported[813849]
Ubuntuphp-dompdfdebpro0.6.2+dfsg-3ubuntu0.18.04.1~esm1Not reportedUSN-6277-1Not reported
Ubuntuphp-dompdfdeb20.040.6.2+dfsg-3ubuntu0.20.04.1Not reportedUSN-6277-1Not reported
Ubuntuphp-dompdfdebpro0.6.1+dfsg-2ubuntu1+esm1Not reportedUBUNTU-CVE-2014-5011Not reported

[Debian bug #813849]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [php-dompdf]Fixed
    Details (2)

    • 2.0.3+dfsg-1+deb12u1 · all · bookworm

      Fixed · Fixed: 0.6.2+dfsg-1

      dsa · php-dompdf · debian · bookworm; dsa · php-dompdf · debian · 12

    • 2.0.3+dfsg-1+deb12u1 · all · bookworm

      Fixed · Fixed: 0.6.2+dfsg-1

      dsa · php-dompdf · debian · bookworm; dsa · php-dompdf · debian · 12

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]