CVE-2007-1864: canonical ubuntu_linux

Modified

Published 09-05-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1864 is a high (CVSS 7.5) vulnerability in canonical ubuntu_linux. EPSS estimates a 2.92% chance of exploitation in the next 30 days, higher than 87% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

2.92%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5

DSA-1330-1 DSA-1331-1 RHSA-2007:0348 RHSA-2007:0349 RHSA-2007:0355

Timeline

09-05-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

2.92%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.92% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat2 products

Canonical1 product

ubuntu_linuxEOL6.06 | 6.10 | 7.04

Debian1 product

debian_linuxEOL3.1 | 4.0

Php1 product

php< 4.4.7 | ≥ 5.1.0, ≤ 5.1.6 | ≥ 5.2.0, < 5.2.2

4 vendors · 5 products

References

30 links

secunia.com/advisories/25660Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.mandriva.com/security/advisories?name=MDKSA-2007:103Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/25187Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/25191Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.vupen.com/english/advisories/2007/2187VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:102Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/26048Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.redhat.com/support/errata/RHSA-2007-0355.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257VDB EntrySignatureX Refsource OVALThird Party Advisory
security.gentoo.org/glsa/glsa-200705-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory

Show all 30 references

www.trustix.org/errata/2007/0017/Vendor AdvisoryX Refsource TRUSTIXBroken Link
www.securityfocus.com/bid/23813VDB EntryX Refsource BIDThird Party Advisory
us2.php.net/releases/4_4_7.phpX Refsource CONFIRMPatchVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0349.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.debian.org/security/2007/dsa-1331Vendor AdvisoryX Refsource DEBIANThird Party Advisory
issues.rpath.com/browse/RPL-1693X Refsource CONFIRMBroken Link
www.debian.org/security/2007/dsa-1330Vendor AdvisoryX Refsource DEBIANThird Party Advisory
us2.php.net/releases/5_2_2.phpX Refsource CONFIRMPatchVendor Advisory
www.ubuntu.com/usn/usn-485-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/27377Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/25945Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/25255Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/26102Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/25445Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.securitytracker.com/id?1018024VDB EntryX Refsource SECTRACKThird Party Advisory
support.avaya.com/elmodocs2/security/ASA-2007-231.htmX Refsource CONFIRMThird Party Advisory
osvdb.org/34674VDB EntryX Refsource OSVDBBroken Link
rhn.redhat.com/errata/RHSA-2007-0348.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/25938Third Party AdvisoryX Refsource SECUNIAPermissions Required
lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory