php-dbg vulnerabilities (TuxCare)
68 vulnerabilities.
php-dbgTuxCareOOB read due to insufficient input validation in imageloadfont()6.5 Mediumphp-dbgTuxCareBuffer overflow in sponge queue functions9.8 Criticalphp-dbgTuxCare$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Mediumphp-dbgTuxCarephar wrapper can occur dos when using quine gzip file2.3 Lowphp-dbgTuxCaremysqlnd/pdo password buffer overflow7.5 Highphp-dbgTuxCareFreeing unallocated memory in php_pgsql_free_params()8.1 Highphp-dbgTuxCareUAF due to php_filter_float() failing8.2 Highphp-dbgTuxCareSpecial characters break path parsing in XML functions5.3 Mediumphp-dbgTuxCarePHP-FPM memory access in root process leading to privilege escalation7.8 Highphp-dbgTuxCareIncorrect URL validation in FILTER_VALIDATE_URL4.3 Mediumphp-dbgTuxCareNull Dereference in SoapClient5.3 Mediumphp-dbgTuxCareFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 Mediumphp-dbgTuxCarePHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-dbgTuxCareWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-dbgTuxCareUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-dbgTuxCareAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 Highphp-dbgTuxCareThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...9.8 Criticalphp-dbgTuxCareThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Critical