php-dba vulnerabilities (Red Hat)
287 vulnerabilities.
php-dbaRed HatThe mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in...5.0 Mediumphp-dbaRed HatUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 Highphp-dbaRed HatThe exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x...6.8 Mediumphp-dbaRed HatInteger overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5...7.5 Highphp-dbaRed HatBuffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc...5.0 Mediumphp-dbaRed HatThe donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5...5.0 Mediumphp-dbaRed Hatgd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...6.4 Mediumphp-dbaRed HatMultiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32...6.8 Mediumphp-dbaRed HatInteger overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in...4.3 Mediumphp-dbaRed HatThe SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that...7.5 Highphp-dbaRed HatThe cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo...4.3 Mediumphp-dbaRed HatThe phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14...2.6 Lowphp-dbaRed HatThe cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP...4.3 Mediumphp-dbaRed HatThe cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in...4.3 Mediumphp-dbaRed HatThe cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo...4.3 Mediumphp-dbaRed HatBuffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the...5.0 Mediumphp-dbaRed HatUse-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp-dbaRed HatUse-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp-dbaRed Hatfile before 5.19 does not properly restrict the amount of data read during a regex search, which...5.0 Mediumphp-dbaRed HatHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...5.1 Mediumphp-dbaRed HatThe cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5...5.0 Mediumphp-dbaRed HatThe cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and...5.0 Mediumphp-dbaRed HatThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...4.3 Mediumphp-dbaRed HatThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...5.0 Mediumphp-dbaRed Hatsoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...4.3 Mediumphp-dbaRed HatFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...5.0 Mediumphp-dbaRed HatThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...7.5 Highphp-dbaRed HatThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...5.0 Mediumphp-dbaRed HatThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...4.3 Mediumphp-dbaRed Hatext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...6.8 Mediumphp-dbaRed HatThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...5.0 Mediumphp-dbaRed HatThe sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does...4.3 Mediumphp-dbaRed HatUnspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...10.0 Highphp-dbaRed HatInteger overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before...7.5 Highphp-dbaRed HatThe crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP,...4.3 Mediumphp-dbaRed Hatsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...5.0 Mediumphp-dbaRed Hatsapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...7.5 Highphp-dbaRed HatThe file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...5.8 Mediumphp-dbaRed Hatfile before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a...4.3 Mediumphp-dbaRed HatMemory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a...5.0 Mediumphp-dbaRed HatPHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive...6.8 Mediumphp-dbaRed HatThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...7.5 Highphp-dbaRed HatPHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create...6.4 Mediumphp-dbaRed HatThe tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service...5.0 Mediumphp-dbaRed HatPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...5.0 Mediumphp-dbaRed HatPHP before 5.3.9 computes hash values for form parameters without restricting the ability to...5.0 Mediumphp-dbaRed HatInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...6.4 Mediumphp-dbaRed Hatcrypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8...5.0 Mediumphp-dbaRed HatThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...6.4 Mediumphp-dbaRed HatStack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3...7.5 High- Show moreLoading…