CVE-2006-4486 json
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to…
published 2006-08-31 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4474
- cvss
- 2.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.4%
- EPSS 2.4% chance of exploitation in 30 days, percentile 83%
- public exploits
- 0
- none known
Summary
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
Patch / fix
- php RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
- php-gd RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
- php-dba RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
- php-pdo RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
- php-xml RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
- php-imap RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
- php-ldap RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
- php-odbc RHEL 1 APPLICATION_STACK 5.1.4-1.el4s1.4
red hat advisories RHSA-2006:0688RHSA-2006:0669
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2006-4486 updated
security flaw
-
Red Hat Application Stack v1 for Enterprise Linux AS (v.4) php 5.1.4-1.el4s1.4, php-gd 5.1.4-1.el4s1.4, php-dba 5.1.4-1.el4s1.4, php-pdo 5.1.4-1.el4s1.4, php-xml 5.1.4-1.el4s1.4, php-imap 5.1.4-1.el4s1.4, +10 more Red Hat Application Stack v1 for Enterprise Linux ES (v.4) php 5.1.4-1.el4s1.4, php-gd 5.1.4-1.el4s1.4, php-dba 5.1.4-1.el4s1.4, php-pdo 5.1.4-1.el4s1.4, php-xml 5.1.4-1.el4s1.4, php-imap 5.1.4-1.el4s1.4, +10 morefixed: vendor fix RHSA-2006:0688
-
Red Hat Desktop version 3 php 4.3.2-36.ent, php-imap 4.3.2-36.ent, php-ldap 4.3.2-36.ent, php-odbc 4.3.2-36.ent, php-mysql 4.3.2-36.ent, php-pgsql 4.3.2-36.ent Red Hat Enterprise Linux AS version 3 php 4.3.2-36.ent, php-imap 4.3.2-36.ent, php-ldap 4.3.2-36.ent, php-odbc 4.3.2-36.ent, php-mysql 4.3.2-36.ent, php-pgsql 4.3.2-36.ent Red Hat Enterprise Linux AS version 4 php 4.3.9-3.18, php-gd 4.3.9-3.18, php-imap 4.3.9-3.18, php-ldap 4.3.9-3.18, php-odbc 4.3.9-3.18, php-pear 4.3.9-3.18, +7 more Red Hat Enterprise Linux Desktop version 4 php 4.3.9-3.18, php-gd 4.3.9-3.18, php-imap 4.3.9-3.18, php-ldap 4.3.9-3.18, php-odbc 4.3.9-3.18, php-pear 4.3.9-3.18, +7 morefixed: vendor fix RHSA-2006:0669
-
Red Hat Enterprise Linux ES version 2.1fixed: vendor fix RHSA-2006:0682
-
Red Hat Enterprise Linux ES version 3 php 4.3.2-36.ent, php-imap 4.3.2-36.ent, php-ldap 4.3.2-36.ent, php-odbc 4.3.2-36.ent, php-mysql 4.3.2-36.ent, php-pgsql 4.3.2-36.ent Red Hat Enterprise Linux ES version 4 php 4.3.9-3.18, php-gd 4.3.9-3.18, php-imap 4.3.9-3.18, php-ldap 4.3.9-3.18, php-odbc 4.3.9-3.18, php-pear 4.3.9-3.18, +7 morefixed: vendor fix RHSA-2006:0669
-
Red Hat Enterprise Linux WS version 2.1fixed: vendor fix RHSA-2006:0682
-
Red Hat Enterprise Linux WS version 3 php 4.3.2-36.ent, php-imap 4.3.2-36.ent, php-ldap 4.3.2-36.ent, php-odbc 4.3.2-36.ent, php-mysql 4.3.2-36.ent, php-pgsql 4.3.2-36.ent Red Hat Enterprise Linux WS version 4 php 4.3.9-3.18, php-gd 4.3.9-3.18, php-imap 4.3.9-3.18, php-ldap 4.3.9-3.18, php-odbc 4.3.9-3.18, php-pear 4.3.9-3.18, +7 morefixed: vendor fix RHSA-2006:0669
-
Red Hat Linux Advanced Workstation 2.1fixed: vendor fix RHSA-2006:0682
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
2.36% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-189 Numeric Errors
- Technology feeds
References
-
hardened-php.net
/hphp/changelog.html#hardening_patch_0.4.14
patch
-
php.net
/release_5_1_6.php
patch
-
redhat.com
/support/errata/RHSA-2006-0669.html
vendor-advisory
-
turbolinux.com
/security/2006/TLSA-2006-38.txt
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2006-0688.html
vendor-advisory
-
ubuntu.com
/usn/usn-362-1
vendor-advisory
-
redhat.com
/support/errata/RHSA-2006-0682.html
vendor-advisory
-
debian.org
/security/2007/dsa-1331
vendor-advisory
-
novell.com
/linux/security/advisories/2006_52_php.html
vendor-advisory
-
secunia.com
/advisories/22487
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/22004
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/22538
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/21546
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/22440
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/22069
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/22225
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/25945
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/22331
third-party-advisory, vendor-advisory
-
securitytracker.com
/id?1016984
vdb-entry
- issues.rpath.com /browse/RPL-683
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086
vdb-entry, signature
- support.avaya.com /elmodocs2/security/ASA-2006-221.htm
-
securityfocus.com
/bid/19582
vdb-entry
- php.net /ChangeLog-5.php#5.1.6
- support.avaya.com /elmodocs2/security/ASA-2006-222.htm
-
securityfocus.com
/archive/1/447866/100/0/threaded
mailing-list
- support.avaya.com /elmodocs2/security/ASA-2006-223.htm
Sources
- CVE List CVE-2006-4486
- NVD CVE-2006-4486
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.