libzip vulnerabilities (TuxCare)
8 vulnerabilities.
-
libzipTuxCare UAF due to php_filter_float() failing 8.2 High -
libzipTuxCare PHP-FPM memory access in root process leading to privilege escalation 7.8 High -
libzipTuxCare Incorrect URL validation in FILTER_VALIDATE_URL 4.3 Medium -
libzipTuxCare Null Dereference in SoapClient 5.3 Medium -
libzipTuxCare FILTER_VALIDATE_URL accepts URLs with invalid userinfo 5.3 Medium -
libzipTuxCare PHP parses encoded cookie names so malicious `__Host-` cookies can be sent 4.3 Medium -
libzipTuxCare Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV 5.4 Medium -
libzipTuxCare Use of freed hash key in the phar_parse_zipfile function 4.8 Medium