php vulnerabilities (Red Hat)
358 vulnerabilities.
phpRed HatThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...9.8 CriticalphpRed HatPHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...9.8 CriticalphpRed HatThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...9.8 CriticalphpRed HatThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...9.8 CriticalphpRed HatPHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...6.5 MediumphpRed HatThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...5.0 MediumphpRed HatThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...7.5 HighphpRed HatAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...5.0 MediumphpRed HatInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...7.5 HighphpRed HatThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...5.0 MediumphpRed HatPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...5.3 MediumphpRed HatPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...6.5 MediumphpRed HatMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...7.5 HighphpRed HatUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 HighphpRed Hatext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...5.8 MediumphpRed HatUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...7.5 HighphpRed HatThe exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21,...6.8 MediumphpRed HatUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 HighphpRed HatThe GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5...5.0 MediumphpRed HatHeap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c...7.5 HighphpRed HatThe mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in...5.0 MediumphpRed HatUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 HighphpRed HatThe exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x...6.8 MediumphpRed HatInteger overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5...7.5 HighphpRed HatBuffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc...5.0 MediumphpRed HatThe donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5...5.0 MediumphpRed Hatgd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...6.4 MediumphpRed HatMultiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32...6.8 MediumphpRed HatInteger overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in...4.3 MediumphpRed HatThe SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that...7.5 HighphpRed HatThe cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo...4.3 MediumphpRed HatThe phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14...2.6 LowphpRed HatThe cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP...4.3 MediumphpRed HatThe cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in...4.3 MediumphpRed HatThe cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo...4.3 MediumphpRed HatBuffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the...5.0 MediumphpRed HatUse-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14...4.6 MediumphpRed HatUse-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14...4.6 MediumphpRed Hatfile before 5.19 does not properly restrict the amount of data read during a regex search, which...5.0 MediumphpRed HatHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...5.1 MediumphpRed HatThe cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5...5.0 MediumphpRed HatThe cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and...5.0 MediumphpRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 MediumphpRed HatJenkins vulnerable to Cross-site Scripting2.1 LowphpRed HatThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...4.3 MediumphpRed HatThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...5.0 MediumphpRed Hatsoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...4.3 MediumphpRed HatFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...5.0 MediumphpRed HatThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...7.5 HighphpRed HatThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...5.0 Medium- Show moreLoading…