php5 vulnerabilities (Debian)
314 vulnerabilities.
php5DebianIn PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a...7.5 Highphp5DebianIn PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers...9.1 Criticalphp5DebianIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's...7.5 Highphp5DebianIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM...7.5 Highphp5DebianIn PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be...7.5 Highphp5DebianIn PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the...7.5 Highphp5DebianPHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen...7.4 Highphp5DebianIn PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...7.5 Highphp5DebianThe object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before...7.5 Highphp5DebianOff-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...9.8 Criticalphp5DebianInteger overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...7.5 Highphp5DebianThe exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15...7.5 Highphp5DebianIn all versions of PHP 7, during the unserialization process, resizing the 'properties' hash...9.8 Criticalphp5DebianThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14...9.8 Criticalphp5Debianext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a...7.5 Highphp5DebianStack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics...7.5 Highphp5DebianPHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup...9.8 Criticalphp5DebianZend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote...7.5 Highphp5DebianUse-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before...9.8 Criticalphp5Debian/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code....9.8 Criticalphp5DebianThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11...7.5 Highphp5Debianext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray...9.8 Criticalphp5Debianext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not...7.5 Highphp5DebianThe ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure...9.8 Criticalphp5DebianUse-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before...9.8 Criticalphp5Debianext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify...8.1 Highphp5Debianext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures,...9.8 Criticalphp5DebianThe imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10...9.8 Criticalphp5Debianext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a...7.5 Highphp5Debianext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a...7.5 Highphp5DebianThe php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10...7.5 Highphp5DebianThe php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10...9.8 Criticalphp5DebianThe exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0...5.3 Mediumphp5DebianThe imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not...9.8 Criticalphp5Debianext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a...7.5 Highphp5Debianext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain...9.8 Criticalphp5DebianInteger overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5...8.8 Highphp5DebianInteger signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi...9.8 Criticalphp5Debianext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly...9.8 Criticalphp5DebianThe locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5...9.8 Criticalphp5DebianThe exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6...6.5 Mediumphp5DebianThe exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before...9.8 Criticalphp5Debianext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not...9.8 Criticalphp5DebianInteger overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38,...7.8 Highphp5DebianThe bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7...7.8 Highphp5DebianHTTP Proxy header vulnerability8.1 Highphp5DebianInteger overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in...9.8 Criticalphp5DebianThe php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers...9.8 Criticalphp5Debianphp_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8...9.8 Criticalphp5DebianDouble free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension...9.8 Critical- Show moreLoading…