php-mbstring vulnerabilities (AlmaLinux)
108 vulnerabilities.
php-mbstringAlmaLinuxPDO::quote() may return unquoted string9.1 Criticalphp-mbstringAlmaLinuxOOB read due to insufficient input validation in imageloadfont()6.5 Mediumphp-mbstringAlmaLinuxBuffer overflow in sponge queue functions9.8 Criticalphp-mbstringAlmaLinux$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Mediumphp-mbstringAlmaLinuxphar wrapper can occur dos when using quine gzip file2.3 Lowphp-mbstringAlmaLinuxmysqlnd/pdo password buffer overflow7.5 Highphp-mbstringAlmaLinuxFreeing unallocated memory in php_pgsql_free_params()8.1 Highphp-mbstringAlmaLinuxnew module: php:8.0No scorephp-mbstringAlmaLinuxUAF due to php_filter_float() failing8.2 Highphp-mbstringAlmaLinuxSpecial characters break path parsing in XML functions5.3 Mediumphp-mbstringAlmaLinuxPHP-FPM memory access in root process leading to privilege escalation7.8 Highphp-mbstringAlmaLinuxDirectory Traversal in Archive_Tar7.1 Highphp-mbstringAlmaLinuxIncorrect URL validation in FILTER_VALIDATE_URL4.3 Mediumphp-mbstringAlmaLinuxNull Dereference in SoapClient5.3 Mediumphp-mbstringAlmaLinuxDirectory Traversal in Archive_Tar7.5 Highphp-mbstringAlmaLinuxFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 Mediumphp-mbstringAlmaLinuxDeserialization of Untrusted Data in Archive_Tar7.8 Highphp-mbstringAlmaLinuxMultiple vulnerabilities through filename manipulation in Archive_Tar7.8 Highphp-mbstringAlmaLinuxPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-mbstringAlmaLinuxWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-mbstringAlmaLinuxUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-mbstringAlmaLinuxTemporary files are not cleaned after OOM when parsing HTTP request data5.3 Mediumphp-mbstringAlmaLinuxget_headers() silently truncates after a null byte5.3 Mediumphp-mbstringAlmaLinuxmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 Highphp-mbstringAlmaLinuxUse-of-uninitialized-value in exif6.5 Mediumphp-mbstringAlmaLinuxFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 Mediumphp-mbstringAlmaLinuxNull Pointer Dereference in PHP Session Upload Progress7.5 Highphp-mbstringAlmaLinuxAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...5.1 Mediumphp-mbstringAlmaLinuxglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 Mediumphp-mbstringAlmaLinuxOOB read in php_strip_tags_ex6.5 Mediumphp-mbstringAlmaLinuxUse-after-free in exif parsing under memory sanitizer4.8 Mediumphp-mbstringAlmaLinuxHeap-buffer-overflow READ in exif4.8 Mediumphp-mbstringAlmaLinuxDirectoryIterator class silently truncates after a null byte3.7 Lowphp-mbstringAlmaLinuxOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 Highphp-mbstringAlmaLinuxAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 Highphp-mbstringAlmaLinuxAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function...7.5 Highphp-mbstringAlmaLinuxOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.7.5 Highphp-mbstringAlmaLinuxheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 Mediumphp-mbstringAlmaLinuxheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 Mediumphp-mbstringAlmaLinuxA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...6.5 Mediumphp-mbstringAlmaLinuxA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 Criticalphp-mbstringAlmaLinuxHeap buffer overflow in EXIF extension4.8 Mediumphp-mbstringAlmaLinuxOut-of-bounds read in iconv.c4.2 Mediumphp-mbstringAlmaLinuxHeap over-read in PHP EXIF extension4.8 Mediumphp-mbstringAlmaLinuxHeap over-read in PHP EXIF extension4.8 Mediumphp-mbstringAlmaLinuxHeap over-read in PHP EXIF extension4.8 Mediumphp-mbstringAlmaLinuxAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-mbstringAlmaLinuxAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-mbstringAlmaLinuxAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-mbstringAlmaLinuxAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 High- Show moreLoading…