php-gd vulnerabilities (TuxCare)
176 vulnerabilities.
php-gdTuxCareThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...9.8 Criticalphp-gdTuxCareThe phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0...8.8 Highphp-gdTuxCareMultiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in...9.8 Criticalphp-gdTuxCareInteger signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote...9.8 Criticalphp-gdTuxCareStack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x...9.8 Criticalphp-gdTuxCareThe make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5...9.8 Criticalphp-gdTuxCareOff-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5...6.8 Mediumphp-gdTuxCareThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...7.5 Highphp-gdTuxCareThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...7.5 Highphp-gdTuxCareThe SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5...7.3 Highphp-gdTuxCareDirectory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28...7.5 Highphp-gdTuxCareMultiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6...7.3 Highphp-gdTuxCareStack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5...7.3 Highphp-gdTuxCareOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...5.9 Mediumphp-gdTuxCarePHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...7.5 Highphp-gdTuxCareThe php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before...6.8 Mediumphp-gdTuxCareThe move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5...5.0 Mediumphp-gdTuxCareInteger overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as...7.5 Highphp-gdTuxCarereadelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x...7.5 Highphp-gdTuxCareDirectory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in...4.3 Mediumphp-gdTuxCarePHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...6.5 Mediumphp-gdTuxCareThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...7.5 Highphp-gdTuxCarePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...6.5 Mediumphp-gdTuxCareHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...10.0 Highphp-gdTuxCareSession fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote...6.8 Mediumphp-gdTuxCarePHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...5.0 Medium