Regular expression functions in the mbstring component were found to have vulnerabilities that could lead to a complete system compromise through crafted multibyte sequences.
An issue in the _gdContributionsAlloc function in gd_interpolation.c can have unspecified impacts via unauthenticated remote attacks.
: PHP 5.6.40 reached the end of its security support on December 31, 2018. Any vulnerabilities discovered after this date remain unpatched by the official PHP team. Vulnerability Statistics
: Resolved issues in the xmlrpc_decode function ( CVE-2019-9020 ) and the PHAR extension ( CVE-2019-9021 ) that could lead to memory disclosure.
Regular expression functions in the mbstring component were found to have vulnerabilities that could lead to a complete system compromise through crafted multibyte sequences.
An issue in the _gdContributionsAlloc function in gd_interpolation.c can have unspecified impacts via unauthenticated remote attacks.
: PHP 5.6.40 reached the end of its security support on December 31, 2018. Any vulnerabilities discovered after this date remain unpatched by the official PHP team. Vulnerability Statistics
: Resolved issues in the xmlrpc_decode function ( CVE-2019-9020 ) and the PHAR extension ( CVE-2019-9021 ) that could lead to memory disclosure.