CVE-2007-1864: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only
• Debian Debian Linux: version 3.1 only; version 4.0 only
• PHP PHP: before 4.4.7 (fixed in 4.4.7); from 5.1.0, up to and including 5.1.6; from 5.2.0, before 5.2.2 (fixed in 5.2.2)
• Red Hat Enterprise Linux Server: version 5.0 only
• Red Hat Enterprise Linux Workstation: version 5.0 only

Published 2007-05-09. Last modified 2026-06-16.