Search for packages
Package details: pkg:deb/debian/xmlrpc-epi@0.54.2-1.2
purl pkg:deb/debian/xmlrpc-epi@0.54.2-1.2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-vqw1-fjuz-aaap Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function. CVE-2016-6296

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T11:31:21.130848+00:00 Debian Oval Importer Fixing VCID-vqw1-fjuz-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T00:26:34.577788+00:00 Debian Oval Importer Fixing VCID-vqw1-fjuz-aaap None 36.1.3
2025-06-08T04:51:18.619271+00:00 Debian Oval Importer Fixing VCID-vqw1-fjuz-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T17:49:18.097426+00:00 Debian Oval Importer Fixing VCID-vqw1-fjuz-aaap None 36.1.0
2025-04-12T20:35:41.924901+00:00 Debian Oval Importer Fixing VCID-vqw1-fjuz-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T03:22:28.957975+00:00 Debian Oval Importer Fixing VCID-vqw1-fjuz-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T16:25:51.773641+00:00 Debian Oval Importer Fixing VCID-vqw1-fjuz-aaap None 36.0.0