php-tidy vulnerabilities (Red Hat)
102 vulnerabilities.
-
php-tidyRed Hat OOB read / info leak in convert.* stream filters when line-break-chars contains NUL 5.9 Medium -
php-tidyRed Hat IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes) 6.5 Medium -
php-tidyRed Hat TLS Hostname Verification Falls Back to CN After SAN Mismatch 4.3 Medium -
php-tidyRed Hat Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN 6.5 Medium -
php-tidyRed Hat Various packet overreads in mysqlnd_writeprotocol.c 3.4 Low -
php-tidyRed Hat Cross-origin credential leak in HTTP stream wrapper redirects 5.9 Medium -
php-tidyRed Hat SOAP: Unbounded Recursion in Server-Side cleanup_xml_node 7.5 High -
php-tidyRed Hat Integer overflow to buffer overflow in soap HTTP parsing 6.5 Medium -
php-tidyRed Hat PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS 6.9 Medium -
php-tidyRed Hat Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection 4.3 Medium -
php-tidyRed Hat Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header 5.8 Medium -
php-tidyRed Hat Stack overflow in phar with circular symlinks 5.4 Medium -
php-tidyRed Hat Out-of-bounds write in bccomp() via crafted operand and scale 8.1 High -
php-tidyRed Hat SQL injection in ext-pgsql via E'...' backslash breakout 8.1 High -
php-tidyRed Hat ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD 5.6 Medium -
php-tidyRed Hat Out-of-bounds read in urldecode() on NetBSD 6.3 Medium -
php-tidyRed Hat XSS within PHP-FPM status endpoint 7.3 High -
php-tidyRed Hat Use-After-Free in SOAP using Apache map 9.5 Critical -
php-tidyRed Hat NULL Pointer Dereference in PDO quoting 8.2 High -
php-tidyRed Hat Heap buffer overflow in array_merge() 6.5 Medium -
php-tidyRed Hat Information Leak of Memory in getimagesize 6.3 Medium -
php-tidyRed Hat Underflow in PHP-FPM can lead to RCE 8.7 High -
php-tidyRed Hat HTTP Proxy header vulnerability 8.1 High -
php-tidyRed Hat The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5... 7.5 High -
php-tidyRed Hat The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24,... 7.5 High -
php-tidyRed Hat Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before... 7.5 High -
php-tidyRed Hat Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the... 7.5 High -
php-tidyRed Hat Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before... 9.8 Critical -
php-tidyRed Hat The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x... 9.8 Critical -
php-tidyRed Hat The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5... 9.8 Critical -
php-tidyRed Hat PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or... 9.8 Critical -
php-tidyRed Hat The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8... 9.8 Critical -
php-tidyRed Hat The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,... 9.8 Critical -
php-tidyRed Hat PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames... 6.5 Medium -
php-tidyRed Hat The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x... 5.0 Medium -
php-tidyRed Hat The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9... 7.5 High -
php-tidyRed Hat Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c... 5.0 Medium -
php-tidyRed Hat Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before... 7.5 High -
php-tidyRed Hat The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and... 5.0 Medium -
php-tidyRed Hat PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames... 5.3 Medium -
php-tidyRed Hat PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames... 6.5 Medium -
php-tidyRed Hat Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP... 7.5 High -
php-tidyRed Hat Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer... 7.5 High -
php-tidyRed Hat ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote... 5.8 Medium -
php-tidyRed Hat Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5... 7.5 High -
php-tidyRed Hat The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21,... 6.8 Medium -
php-tidyRed Hat The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5... 5.0 Medium -
php-tidyRed Hat Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c... 7.5 High -
php-tidyRed Hat The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x... 6.8 Medium -
php-tidyRed Hat Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5... 7.5 High - Show olderLoading…