php-fpm vulnerabilities (Red Hat)
207 vulnerabilities.
php-fpmRed HatPHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...9.8 Criticalphp-fpmRed HatThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...9.8 Criticalphp-fpmRed HatThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...9.8 Criticalphp-fpmRed HatPHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...6.5 Mediumphp-fpmRed HatThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...5.0 Mediumphp-fpmRed HatThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...7.5 Highphp-fpmRed HatAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...5.0 Mediumphp-fpmRed HatInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...7.5 Highphp-fpmRed HatThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...5.0 Mediumphp-fpmRed HatPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...5.3 Mediumphp-fpmRed HatPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...6.5 Mediumphp-fpmRed HatMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...7.5 Highphp-fpmRed HatUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 Highphp-fpmRed Hatext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...5.8 Mediumphp-fpmRed HatUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...7.5 Highphp-fpmRed HatThe exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21,...6.8 Mediumphp-fpmRed HatUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 Highphp-fpmRed HatThe GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5...5.0 Mediumphp-fpmRed HatHeap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c...7.5 Highphp-fpmRed HatThe mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in...5.0 Mediumphp-fpmRed HatUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 Highphp-fpmRed HatThe exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x...6.8 Mediumphp-fpmRed HatInteger overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5...7.5 Highphp-fpmRed HatBuffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc...5.0 Mediumphp-fpmRed HatThe donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5...5.0 Mediumphp-fpmRed Hatgd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...6.4 Mediumphp-fpmRed HatMultiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32...6.8 Mediumphp-fpmRed HatInteger overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in...4.3 Mediumphp-fpmRed HatThe SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that...7.5 Highphp-fpmRed HatThe cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo...4.3 Mediumphp-fpmRed HatThe phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14...2.6 Lowphp-fpmRed HatThe cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP...4.3 Mediumphp-fpmRed HatThe cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in...4.3 Mediumphp-fpmRed HatThe cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo...4.3 Mediumphp-fpmRed HatBuffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the...5.0 Mediumphp-fpmRed HatUse-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp-fpmRed HatUse-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp-fpmRed Hatfile before 5.19 does not properly restrict the amount of data read during a regex search, which...5.0 Mediumphp-fpmRed HatHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...5.1 Mediumphp-fpmRed HatThe cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5...5.0 Mediumphp-fpmRed HatThe cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and...5.0 Mediumphp-fpmRed HatThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...4.3 Mediumphp-fpmRed HatThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...5.0 Mediumphp-fpmRed Hatsoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...4.3 Mediumphp-fpmRed HatFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...5.0 Mediumphp-fpmRed HatThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...7.5 Highphp-fpmRed HatThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...5.0 Mediumphp-fpmRed HatThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...4.3 Mediumphp-fpmRed Hatext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...6.8 Mediumphp-fpmRed HatThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...5.0 Medium- Show moreLoading…