libzip-devel vulnerabilities (TuxCare)
8 vulnerabilities.
-
libzip-develTuxCare UAF due to php_filter_float() failing 8.2 High -
libzip-develTuxCare PHP-FPM memory access in root process leading to privilege escalation 7.8 High -
libzip-develTuxCare Incorrect URL validation in FILTER_VALIDATE_URL 4.3 Medium -
libzip-develTuxCare Null Dereference in SoapClient 5.3 Medium -
libzip-develTuxCare FILTER_VALIDATE_URL accepts URLs with invalid userinfo 5.3 Medium -
libzip-develTuxCare PHP parses encoded cookie names so malicious `__Host-` cookies can be sent 4.3 Medium -
libzip-develTuxCare Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV 5.4 Medium -
libzip-develTuxCare Use of freed hash key in the phar_parse_zipfile function 4.8 Medium