php-xmlrpc vulnerabilities (Red Hat)
307 vulnerabilities.
php-xmlrpcRed HatPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-xmlrpcRed HatWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-xmlrpcRed HatUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-xmlrpcRed HatTemporary files are not cleaned after OOM when parsing HTTP request data5.3 Mediumphp-xmlrpcRed Hatget_headers() silently truncates after a null byte5.3 Mediumphp-xmlrpcRed Hatmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 Highphp-xmlrpcRed HatUse-of-uninitialized-value in exif6.5 Mediumphp-xmlrpcRed HatFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 Mediumphp-xmlrpcRed HatNull Pointer Dereference in PHP Session Upload Progress7.5 Highphp-xmlrpcRed HatAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...5.1 Mediumphp-xmlrpcRed Hatglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 Mediumphp-xmlrpcRed HatOOB read in php_strip_tags_ex6.5 Mediumphp-xmlrpcRed HatUse-after-free in exif parsing under memory sanitizer4.8 Mediumphp-xmlrpcRed HatHeap-buffer-overflow READ in exif4.8 Mediumphp-xmlrpcRed HatDirectoryIterator class silently truncates after a null byte3.7 Lowphp-xmlrpcRed HatOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 Highphp-xmlrpcRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 Highphp-xmlrpcRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function...7.5 Highphp-xmlrpcRed HatUnderflow in PHP-FPM can lead to RCE8.7 Highphp-xmlrpcRed HatOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.7.5 Highphp-xmlrpcRed Hatheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 Mediumphp-xmlrpcRed Hatheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 Mediumphp-xmlrpcRed HatA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...6.5 Mediumphp-xmlrpcRed HatA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 Criticalphp-xmlrpcRed HatHeap buffer overflow in EXIF extension4.8 Mediumphp-xmlrpcRed HatOut-of-bounds read in iconv.c4.2 Mediumphp-xmlrpcRed HatHeap over-read in PHP EXIF extension4.8 Mediumphp-xmlrpcRed HatHeap over-read in PHP EXIF extension4.8 Mediumphp-xmlrpcRed HatHeap over-read in PHP EXIF extension4.8 Mediumphp-xmlrpcRed HatAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-xmlrpcRed HatAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-xmlrpcRed HatAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-xmlrpcRed HatAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 Highphp-xmlrpcRed HatAn issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2....7.5 Highphp-xmlrpcRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...7.5 Highphp-xmlrpcRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-xmlrpcRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-xmlrpcRed HatAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-xmlrpcRed HatIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 Highphp-xmlrpcRed HatAn issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1...6.1 Mediumphp-xmlrpcRed HatIn PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there...9.8 Criticalphp-xmlrpcRed HatAn issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x...6.1 Mediumphp-xmlrpcRed HatThe GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka...6.5 Mediumphp-xmlrpcRed HatThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Criticalphp-xmlrpcRed HatInteger overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote...7.8 Highphp-xmlrpcRed HatThe gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2...5.5 Mediumphp-xmlrpcRed HatThe bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7...7.8 Highphp-xmlrpcRed HatHTTP Proxy header vulnerability8.1 Highphp-xmlrpcRed HatInteger overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd)...8.8 Highphp-xmlrpcRed HatDouble free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the...9.8 Critical- Show moreLoading…