libzip-tools vulnerabilities (TuxCare)

8 vulnerabilities.

• libzip-tools TuxCare UAF due to php_filter_float() failing CVE-2021-21708 Fix available 8.2 HighDecember 31, 2021
• libzip-tools TuxCare PHP-FPM memory access in root process leading to privilege escalation CVE-2021-21703 Fix available 7.8 HighOctober 21, 2021
• libzip-tools TuxCare Incorrect URL validation in FILTER_VALIDATE_URL CVE-2021-21705 Fix available 4.3 MediumJuly 2, 2021
• libzip-tools TuxCare Null Dereference in SoapClient CVE-2021-21702 Fix available 5.3 MediumFebruary 8, 2021
• libzip-tools TuxCare FILTER_VALIDATE_URL accepts URLs with invalid userinfo CVE-2020-7071 Fix available 5.3 MediumJanuary 14, 2021
• libzip-tools TuxCare PHP parses encoded cookie names so malicious `__Host-` cookies can be sent CVE-2020-7070 Fix available 4.3 MediumOctober 2, 2020
• libzip-tools TuxCare Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV CVE-2020-7069 Fix available 5.4 MediumOctober 2, 2020
• libzip-tools TuxCare Use of freed hash key in the phar_parse_zipfile function CVE-2020-7068 Fix available 4.8 MediumAugust 26, 2020