php7-test vulnerabilities (SUSE)
19 vulnerabilities.
-
php7-testSUSE RCE via stale global state 9.2 Critical -
php7-testSUSE RCE via OOM corruption 9.2 Critical -
php7-testSUSE OOB read / info leak in convert.* stream filters when line-break-chars contains NUL 5.9 Medium -
php7-testSUSE IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes) 6.5 Medium -
php7-testSUSE TLS Hostname Verification Falls Back to CN After SAN Mismatch 4.3 Medium -
php7-testSUSE Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN 6.5 Medium -
php7-testSUSE Various packet overreads in mysqlnd_writeprotocol.c 3.4 Low -
php7-testSUSE Cross-origin credential leak in HTTP stream wrapper redirects 5.9 Medium -
php7-testSUSE SOAP: Unbounded Recursion in Server-Side cleanup_xml_node 7.5 High -
php7-testSUSE Integer overflow to buffer overflow in soap HTTP parsing 6.5 Medium -
php7-testSUSE Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection 4.3 Medium -
php7-testSUSE Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header 5.8 Medium -
php7-testSUSE Important: gd security update 6.5 Medium -
php7-testSUSE Stack overflow in phar with circular symlinks 5.4 Medium -
php7-testSUSE SQL injection in ext-pgsql via E'...' backslash breakout 8.1 High -
php7-testSUSE ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD 5.6 Medium -
php7-testSUSE Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium 9.8 Critical -
php7-testSUSE libsodium has Incomplete List of Disallowed Inputs 4.5 Medium -
php7-testSUSE Heap buffer overflow in array_merge() 6.5 Medium