The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Jul 13, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2014-001Upgrade macOS to the latest version | Aug 28, 2015 | Jul 13, 2013 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2014-001 | Mar 3, 2014 | Jul 13, 2013 |
| Centos_linux | — | Upgrade php53-mbstringUpgrade php53-gdUpgrade php-bcmathUpgrade php-pdoUpgrade php-mysqlUpgrade php-ztsUpgrade php-snmpUpgrade php-embeddedUpgrade php-develUpgrade php-commonUpgrade php53-imapUpgrade php-cliUpgrade php-xmlrpcUpgrade php53-commonUpgrade php53-develUpgrade php53-odbcUpgrade php53-soapUpgrade php-xmlUpgrade php-fpmUpgrade php-recodeUpgrade php-ldapUpgrade php53-processUpgrade php-mbstringUpgrade php53-pdoUpgrade php-pspellUpgrade php53-intlUpgrade php-tidyUpgrade phpUpgrade php-odbcUpgrade php-processUpgrade php53-ldapUpgrade php53-mysqlUpgrade php53-xmlrpcUpgrade php-dbaUpgrade php-intlUpgrade php-enchantUpgrade php53-pgsqlUpgrade php53-pspellUpgrade php53-xmlUpgrade php53-snmpUpgrade php-ncursesUpgrade php53-dbaUpgrade php-gdUpgrade php-soapUpgrade php53Upgrade php-imapUpgrade php-pgsqlUpgrade php53-bcmathUpgrade php53-cli | Dec 1, 2016 | Jul 13, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 14, 2015 |
| Freebsd | — | Upgrade php53 | Dec 10, 2025 | Jul 16, 2013 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jul 13, 2013 |
| Oracle Solaris | — | Upgrade web/php-52 to version 5.2.17-0.175.1.17.0.3.0 on Solaris 11.1Upgrade web/php-53 to version 5.3.27-0.175.1.17.0.3.0 on Solaris 11.1 | May 29, 2017 | Jul 13, 2013 |
| Oracle_linux | — | Upgrade php-imapUpgrade php53-pdoUpgrade phpUpgrade php-pgsqlUpgrade php53-cliUpgrade php-bcmathUpgrade php53-gdUpgrade php-dbaUpgrade php53Upgrade php53-xmlrpcUpgrade php-ncursesUpgrade php53-ldapUpgrade php53-dbaUpgrade php-odbcUpgrade php-tidyUpgrade php-embeddedUpgrade php-soapUpgrade php53-imapUpgrade php53-bcmathUpgrade php53-pspellUpgrade php53-odbcUpgrade php-ldapUpgrade php-intlUpgrade php-commonUpgrade php53-processUpgrade php53-snmpUpgrade php-mysqlUpgrade php-pspellUpgrade php53-xmlUpgrade php53-commonUpgrade php53-soapUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-snmpUpgrade php-mbstringUpgrade php53-develUpgrade php-processUpgrade php-xmlUpgrade php53-mbstringUpgrade php-develUpgrade php-pdoUpgrade php-gdUpgrade php-recodeUpgrade php53-intlUpgrade php-enchantUpgrade php53-mysqlUpgrade php-ztsUpgrade php53-pgsqlUpgrade php-cli | Oct 16, 2024 | Jul 13, 2013 |
| Php | — | Upgrade to PHP version 5.3.27 | Jul 22, 2013 | Jul 13, 2013 |
| Suse | — | Upgrade php53-sqliteUpgrade php53-sysvsemUpgrade php53-xmlrpcUpgrade php53-curlUpgrade php5-tokenizerUpgrade php53-xmlwriterUpgrade apache2-mod_php53Upgrade php5-fpmUpgrade php5-exifUpgrade php5-mbstringUpgrade php5-zipUpgrade php53-mysqlUpgrade php5-suhosinUpgrade php53-tidyUpgrade php5-opensslUpgrade php5-sysvshmUpgrade php53-mbstringUpgrade php53-exifUpgrade php5-dbaseUpgrade php5-gdUpgrade php5-ctypeUpgrade php5-pgsqlUpgrade php53-pspellUpgrade php53-jsonUpgrade php5-imapUpgrade php53-domUpgrade php5-gettextUpgrade php53-sysvmsgUpgrade sle-sdk-releaseUpgrade php5-posixUpgrade apache2-mod_php5Upgrade php5-domUpgrade php53-fileinfoUpgrade php53-soapUpgrade php5-iconvUpgrade php5-socketsUpgrade php53-gettextUpgrade php5-pearUpgrade php5-fileinfoUpgrade php5-tidyUpgrade php5-zlibUpgrade php53-intlUpgrade php53-ftpUpgrade php5-sysvmsgUpgrade php5-xslUpgrade php53-suhosinUpgrade php5-xmlwriterUpgrade php5-pspellUpgrade php5-wddxUpgrade php53-develUpgrade php53-tokenizerUpgrade php53-opensslUpgrade php53-wddxUpgrade php5-intlUpgrade php53-pgsqlUpgrade php5-xmlrpcUpgrade php53-iconvUpgrade php5-bcmathUpgrade php5-curlUpgrade php5-xmlreaderUpgrade php53-ldapUpgrade php5-sqliteUpgrade php53-xmlreaderUpgrade php53-zlibUpgrade php5-shmopUpgrade php53-ctypeUpgrade php5-bz2Upgrade php53-shmopUpgrade php5Upgrade php5-mcryptUpgrade php5-jsonUpgrade php5-hashUpgrade php53-pearUpgrade php53-snmpUpgrade php5-gmpUpgrade php53-fastcgiUpgrade php53-bz2Upgrade php5-calendarUpgrade php53-dbaUpgrade php5-ncursesUpgrade php5-mhashUpgrade php53-xslUpgrade php53-mcryptUpgrade php53-zipUpgrade php53-readlineUpgrade php53-pdoUpgrade php5-ftpUpgrade php53Upgrade php5-pdoUpgrade php5-mssqlUpgrade php53-posixUpgrade php5-readlineUpgrade php5-fastcgiUpgrade php53-gdUpgrade php53-imapUpgrade php5-pcntlUpgrade php5-dbaUpgrade php5-soapUpgrade php53-odbcUpgrade php53-gmpUpgrade php53-bcmathUpgrade php5-develUpgrade php53-socketsUpgrade php5-mysqlUpgrade php5-sysvsemUpgrade php5-enchantUpgrade php5-pharUpgrade php5-ldapUpgrade php5-odbcUpgrade php53-sysvshmUpgrade php53-pcntlUpgrade php5-snmpUpgrade php53-calendar | Feb 17, 2015 | Jul 13, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | Jul 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub