php-pecl-xdebug vulnerabilities (Red Hat)
96 vulnerabilities.
php-pecl-xdebugRed HatPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-pecl-xdebugRed HatWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-pecl-xdebugRed HatUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-pecl-xdebugRed HatTemporary files are not cleaned after OOM when parsing HTTP request data5.3 Mediumphp-pecl-xdebugRed Hatget_headers() silently truncates after a null byte5.3 Mediumphp-pecl-xdebugRed Hatmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 Highphp-pecl-xdebugRed HatUse-of-uninitialized-value in exif6.5 Mediumphp-pecl-xdebugRed HatFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 Mediumphp-pecl-xdebugRed HatNull Pointer Dereference in PHP Session Upload Progress7.5 Highphp-pecl-xdebugRed HatAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...5.1 Mediumphp-pecl-xdebugRed HatThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...9.8 Criticalphp-pecl-xdebugRed Hatglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 Mediumphp-pecl-xdebugRed HatOOB read in php_strip_tags_ex6.5 Mediumphp-pecl-xdebugRed HatUse-after-free in exif parsing under memory sanitizer4.8 Mediumphp-pecl-xdebugRed HatHeap-buffer-overflow READ in exif4.8 Mediumphp-pecl-xdebugRed HatDirectoryIterator class silently truncates after a null byte3.7 Lowphp-pecl-xdebugRed Hatmcollective has a default password set at install9.8 Criticalphp-pecl-xdebugRed HatOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 Highphp-pecl-xdebugRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 Highphp-pecl-xdebugRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function...7.5 Highphp-pecl-xdebugRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 Mediumphp-pecl-xdebugRed HatOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.7.5 Highphp-pecl-xdebugRed Hatheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 Mediumphp-pecl-xdebugRed Hatheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 Mediumphp-pecl-xdebugRed HatA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...6.5 Mediumphp-pecl-xdebugRed HatA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 Criticalphp-pecl-xdebugRed HatHeap buffer overflow in EXIF extension4.8 Mediumphp-pecl-xdebugRed HatOut-of-bounds read in iconv.c4.2 Mediumphp-pecl-xdebugRed HatThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Criticalphp-pecl-xdebugRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 Highphp-pecl-xdebugRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 Lowphp-pecl-xdebugRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 Mediumphp-pecl-xdebugRed HatJenkins vulnerable to Cross-site Scripting2.1 Lowphp-pecl-xdebugRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 Medium