CVE-2013-6420
NoneCVSS
—
EPSS
35.6%
Published
Dec 17, 2013
CISA due date
—
The record
The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | php5 | 0 | 5.3.3-7+squeeze18 |
| Debian:7 | php5 | 0 | 5.4.4-14+deb7u7 |
| Mageia:3 | php | 0 | 5.4.23-1.mga3 |
| Mageia:3 | php-apc | 0 | 3.1.14-7.5.mga3 |
| Mageia:3 | php-gd-bundled | 0 | 5.4.23-1.mga3 |
| Red Hat:enterprise_linux:5::client_workstation | php | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-bcmath | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-cli | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-common | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-dba | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-debuginfo | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-devel | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-gd | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-imap | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-ldap | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-mbstring | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-mysql | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-ncurses | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-odbc | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-pdo | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-pgsql | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-snmp | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-soap | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-xml | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php-xmlrpc | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53 | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-bcmath | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-cli | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-common | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-dba | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-debuginfo | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-devel | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-gd | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-imap | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-intl | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-ldap | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mbstring | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mysql | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-odbc | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pdo | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pgsql | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-process | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pspell | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-snmp | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-soap | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xml | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xmlrpc | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-bcmath | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-cli | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-common | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-dba | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-debuginfo | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-devel | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-gd | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-imap | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-ldap | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-mbstring | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-mysql | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-ncurses | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-odbc | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-pdo | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-pgsql | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-snmp | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-soap | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-xml | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php-xmlrpc | 0 | 0:5.1.6-43.el5_10 |
| Red Hat:enterprise_linux:5::server | php53 | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-bcmath | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-cli | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-common | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-dba | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-debuginfo | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-devel | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-gd | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-imap | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-intl | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-ldap | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-mbstring | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-mysql | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-odbc | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-pdo | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-pgsql | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-process | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-pspell | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-snmp | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-soap | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-xml | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:5::server | php53-xmlrpc | 0 | 0:5.3.3-22.el5_10 |
| Red Hat:enterprise_linux:6::client | php | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-bcmath | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-cli | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-common | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-dba | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-debuginfo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-devel | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-embedded | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-enchant | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-fpm | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-gd | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-imap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-intl | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-ldap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-mbstring | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-mysql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-odbc | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-pdo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-pgsql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-process | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-pspell | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-recode | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-snmp | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-soap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-tidy | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-xml | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-xmlrpc | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::client | php-zts | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-bcmath | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-cli | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-common | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-dba | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-debuginfo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-devel | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-embedded | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-enchant | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-fpm | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-gd | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-imap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-intl | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-ldap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-mbstring | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-mysql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-odbc | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-pdo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-pgsql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-process | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-pspell | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-recode | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-snmp | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-soap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-tidy | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-xml | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-xmlrpc | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::computenode | php-zts | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-bcmath | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-cli | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-common | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-dba | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-debuginfo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-devel | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-embedded | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-enchant | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-fpm | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-gd | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-imap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-intl | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-ldap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-mbstring | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-mysql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-odbc | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-pdo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-pgsql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-process | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-pspell | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-recode | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-snmp | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-soap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-tidy | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-xml | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-xmlrpc | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::server | php-zts | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-bcmath | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-cli | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-common | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-dba | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-debuginfo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-devel | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-embedded | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-enchant | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-fpm | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-gd | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-imap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-intl | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-ldap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-mbstring | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-mysql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-odbc | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-pdo | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-pgsql | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-process | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-pspell | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-recode | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-snmp | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-soap | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-tidy | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-xml | 0 | 0:5.3.3-27.el6_5 |
| Red Hat:enterprise_linux:6::workstation | php-xmlrpc | 0 | 0:5.3.3-27.el6_5 |
Related vulnerabilities
- CVE-2015-6834 Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and… Also affects php5
- CVE-2015-5589 The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x… Also affects php5
- CVE-2015-4643 Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x… Also affects php5
- CVE-2015-4602 The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before… Also affects php5
- CVE-2015-4600 The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before… Also affects php5
- CVE-2015-4599 The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before… Also affects php5
- CVE-2015-3411 PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that… Also affects php5
- CVE-2015-6836 The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before… Also affects php5