GCVE - cpe:2.3:a:php:php:5.5.33:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:php:php:5.5.33:*:*:*:*:*:*:*

part: a version: 5.5.33 update: *

Vendor	Php (`9aec2613-7a27-5ce5-8ac7-140851d8da4c`)
Product	Php (`38640b93-5029-5cca-a025-ab7d01c98b51`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/php/php-src`	purl2cpe	2026-06-01 10:17:42.512994

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-7478`	vulnerable	2026-06-03 14:36:07.955772	Details available Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876. Published: 2017-01-11T06:02:00.000Z Updated: 2024-08-06T01:57:47.681Z Open on db.gcve.eu Reference links http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf http://www.securityfocus.com/bid/95150 https://www.youtube.com/watch?v=LDcaPstAuPk https://security.netapp.com/advisory/ntap-20180112-0001/ http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5116`	not_vulnerable	2026-06-03 14:35:54.490108	Details available gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name. Published: 2016-08-07T10:00:00.000Z Updated: 2024-08-06T00:53:47.352Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html https://github.com/libgd/libgd/issues/211 http://www.openwall.com/lists/oss-security/2016/05/29/5 http://www.debian.org/security/2016/dsa-3619 http://www.ubuntu.com/usn/USN-3030-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4073`	vulnerable	2026-06-03 14:35:47.214398	Details available Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call. Published: 2016-05-20T10:00:00.000Z Updated: 2024-08-06T00:17:30.665Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2952-1 http://www.securityfocus.com/bid/85991 http://www.php.net/ChangeLog-7.php https://security.gentoo.org/glsa/201611-22 https://support.apple.com/HT206567	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4072`	vulnerable	2026-06-03 14:35:47.212822	Details available The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c. Published: 2016-05-20T10:00:00.000Z Updated: 2024-08-06T00:17:30.790Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2952-1 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 http://www.php.net/ChangeLog-7.php https://security.gentoo.org/glsa/201611-22 https://support.apple.com/HT206567	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4071`	vulnerable	2026-06-03 14:35:47.210518	Details available Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call. Published: 2016-05-20T10:00:00.000Z Updated: 2024-08-06T00:17:30.969Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2952-1 https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6e25966544fb1d2f3d7596e060ce9c9269bbdcf8 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 http://www.php.net/ChangeLog-7.php https://security.gentoo.org/glsa/201611-22	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.