rh-php73-php vulnerabilities (Red Hat)

24 vulnerabilities.

• rh-php73-php Red Hat mysqlnd/pdo password buffer overflow CVE-2022-31626 Public exploitFix available EPSS 58.1% 7.5 HighJune 13, 2022
• rh-php73-php Red Hat Freeing unallocated memory in php_pgsql_free_params() CVE-2022-31625 Fix available 8.1 HighJune 13, 2022
• rh-php73-php Red Hat Special characters break path parsing in XML functions CVE-2021-21707 Public exploitFix available EPSS 25.3% 5.3 MediumNovember 20, 2021
• rh-php73-php Red Hat PHP-FPM memory access in root process leading to privilege escalation CVE-2021-21703 Fix available 7.8 HighOctober 21, 2021
• rh-php73-php Red Hat Incorrect URL validation in FILTER_VALIDATE_URL CVE-2021-21705 Fix available 4.3 MediumJuly 2, 2021
• rh-php73-php Red Hat Null Dereference in SoapClient CVE-2021-21702 Fix available 5.3 MediumFebruary 8, 2021
• rh-php73-php Red Hat FILTER_VALIDATE_URL accepts URLs with invalid userinfo CVE-2020-7071 Fix available 5.3 MediumJanuary 14, 2021
• rh-php73-php Red Hat PHP parses encoded cookie names so malicious `__Host-` cookies can be sent CVE-2020-7070 Fix available 4.3 MediumOctober 2, 2020
• rh-php73-php Red Hat Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV CVE-2020-7069 Fix available 5.4 MediumOctober 2, 2020
• rh-php73-php Red Hat Use of freed hash key in the phar_parse_zipfile function CVE-2020-7068 Fix available 4.8 MediumAugust 26, 2020
• rh-php73-php Red Hat Temporary files are not cleaned after OOM when parsing HTTP request data CVE-2019-11048 Fix available 5.3 MediumMay 20, 2020
• rh-php73-php Red Hat get_headers() silently truncates after a null byte CVE-2020-7066 Fix available 5.3 MediumApril 1, 2020
• rh-php73-php Red Hat mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full CVE-2020-7065 Fix available 7.4 HighApril 1, 2020
• rh-php73-php Red Hat Use-of-uninitialized-value in exif CVE-2020-7064 Fix available 6.5 MediumApril 1, 2020
• rh-php73-php Red Hat Files added to tar with Phar::buildFromIterator have all-access permissions CVE-2020-7063 Fix available 5.5 MediumFebruary 27, 2020
• rh-php73-php Red Hat Null Pointer Dereference in PHP Session Upload Progress CVE-2020-7062 Fix available 7.5 HighFebruary 27, 2020
• rh-php73-php Red Hat global buffer-overflow in mbfl_filt_conv_big5_wchar CVE-2020-7060 Fix available 6.5 MediumJanuary 28, 2020
• rh-php73-php Red Hat OOB read in php_strip_tags_ex CVE-2020-7059 Fix available 6.5 MediumJanuary 28, 2020
• rh-php73-php Red Hat Use-after-free in exif parsing under memory sanitizer CVE-2019-11050 Fix available 4.8 MediumDecember 23, 2019
• rh-php73-php Red Hat Heap-buffer-overflow READ in exif CVE-2019-11047 Fix available 4.8 MediumDecember 23, 2019
• rh-php73-php Red Hat DirectoryIterator class silently truncates after a null byte CVE-2019-11045 Fix available 3.7 LowDecember 23, 2019
• rh-php73-php Red Hat Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over... CVE-2019-19246 Fix available 7.5 HighNovember 25, 2019
• rh-php73-php Red Hat An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in... CVE-2019-19203 Public exploitFix available 7.5 HighNovember 21, 2019
• rh-php73-php Red Hat An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function... CVE-2019-19204 Public exploitFix available 7.5 HighNovember 21, 2019