GHSA-c645-h8hj-wvjj

GHSA-c645-h8hj-wvjj PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from GitHub Advisory Database · Published May 1, 2022

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Timeline

May 1, 2022 CVE Published
Apr 29, 2026 Distribution Patch (3 in total, the first dated here)
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-c645-h8hj-wvjj
vulnetix vdb fixes GHSA-c645-h8hj-wvjj

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-c645-h8hj-wvjj/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2007-1864 advisory
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html url
http://secunia.com/advisories/25191 url
http://secunia.com/advisories/25255 url
http://secunia.com/advisories/25445 url
http://secunia.com/advisories/25945 url
http://secunia.com/advisories/26048 url
http://secunia.com/advisories/27377 url
http://security.gentoo.org/glsa/glsa-200705-19.xml url
http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm url
http://www.debian.org/security/2007/dsa-1331 url
http://www.mandriva.com/security/advisories?name=MDKSA-2007:102 url
http://www.mandriva.com/security/advisories?name=MDKSA-2007:103 url
http://www.securityfocus.com/bid/23813 url
http://www.securitytracker.com/id?1018024 url
http://www.ubuntu.com/usn/usn-485-1 url
http://www.vupen.com/english/advisories/2007/2187 url
https://issues.rpath.com/browse/RPL-1693 url
http://secunia.com/advisories/26102 url
http://www.trustix.org/errata/2007/0017 url

…and 11 more

Look up in the Resolve Platform →