libzip vulnerabilities (Red Hat)
105 vulnerabilities.
libzipRed HatFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 MediumlibzipRed HatDeserialization of Untrusted Data in Archive_Tar7.8 HighlibzipRed HatMultiple vulnerabilities through filename manipulation in Archive_Tar7.8 HighlibzipRed HatPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 MediumlibzipRed HatWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 MediumlibzipRed HatUse of freed hash key in the phar_parse_zipfile function4.8 MediumlibzipRed HatTemporary files are not cleaned after OOM when parsing HTTP request data5.3 MediumlibzipRed Hatget_headers() silently truncates after a null byte5.3 MediumlibzipRed Hatmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 HighlibzipRed HatUse-of-uninitialized-value in exif6.5 MediumlibzipRed HatFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 MediumlibzipRed HatNull Pointer Dereference in PHP Session Upload Progress7.5 HighlibzipRed HatAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...5.1 MediumlibzipRed Hatglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 MediumlibzipRed HatOOB read in php_strip_tags_ex6.5 MediumlibzipRed HatUse-after-free in exif parsing under memory sanitizer4.8 MediumlibzipRed HatHeap-buffer-overflow READ in exif4.8 MediumlibzipRed HatDirectoryIterator class silently truncates after a null byte3.7 LowlibzipRed HatOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 HighlibzipRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 HighlibzipRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function...7.5 HighlibzipRed HatUnderflow in PHP-FPM can lead to RCE8.7 HighlibzipRed HatOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.7.5 HighlibzipRed Hatheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 MediumlibzipRed Hatheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 MediumlibzipRed HatA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...6.5 MediumlibzipRed HatA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 CriticallibzipRed HatHeap buffer overflow in EXIF extension4.8 MediumlibzipRed HatOut-of-bounds read in iconv.c4.2 MediumlibzipRed HatHeap over-read in PHP EXIF extension4.8 MediumlibzipRed HatHeap over-read in PHP EXIF extension4.8 MediumlibzipRed HatHeap over-read in PHP EXIF extension4.8 MediumlibzipRed HatAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 HighlibzipRed HatAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 HighlibzipRed HatAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 HighlibzipRed HatAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 HighlibzipRed HatAn issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2....7.5 HighlibzipRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...7.5 HighlibzipRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 CriticallibzipRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 CriticallibzipRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 CriticallibzipRed HatIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 HighlibzipRed HatThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Critical