php-mbstring vulnerabilities (TuxCare)
176 vulnerabilities.
php-mbstringTuxCarepassword_verify() always returns true for some invalid hashes7.7 Highphp-mbstringTuxCarePDO::quote() may return unquoted string9.1 Criticalphp-mbstringTuxCareOOB read due to insufficient input validation in imageloadfont()6.5 Mediumphp-mbstringTuxCareBuffer overflow in sponge queue functions9.8 Criticalphp-mbstringTuxCare$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Mediumphp-mbstringTuxCarephar wrapper can occur dos when using quine gzip file2.3 Lowphp-mbstringTuxCaremysqlnd/pdo password buffer overflow7.5 Highphp-mbstringTuxCareFreeing unallocated memory in php_pgsql_free_params()8.1 Highphp-mbstringTuxCareUpdate of php 5.3: Remove mariadb102 patch to eliminate faulty functionalityNo scorephp-mbstringTuxCareUpdate of php 5.3: Fix segfault during graceful Apache restartNo scorephp-mbstringTuxCareUAF due to php_filter_float() failing8.2 Highphp-mbstringTuxCareSpecial characters break path parsing in XML functions5.3 Mediumphp-mbstringTuxCarePHP-FPM memory access in root process leading to privilege escalation7.8 Highphp-mbstringTuxCareIncorrect URL validation in FILTER_VALIDATE_URL4.3 Mediumphp-mbstringTuxCareMultiple vulnerabilities in Firebird client extension5.0 Mediumphp-mbstringTuxCareNull Dereference in SoapClient5.3 Mediumphp-mbstringTuxCareFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 Mediumphp-mbstringTuxCarePHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-mbstringTuxCareWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-mbstringTuxCareUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-mbstringTuxCareTemporary files are not cleaned after OOM when parsing HTTP request data5.3 Mediumphp-mbstringTuxCareOOB Read in urldecode()7.5 Highphp-mbstringTuxCareOOB read in php_strip_tags_ex6.5 Mediumphp-mbstringTuxCareUse-after-free in exif parsing under memory sanitizer4.8 Mediumphp-mbstringTuxCareHeap-buffer-overflow READ in exif4.8 Mediumphp-mbstringTuxCareBuffer underflow in bc_shift_addsub3.7 Lowphp-mbstringTuxCareDirectoryIterator class silently truncates after a null byte3.7 Lowphp-mbstringTuxCareOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 Highphp-mbstringTuxCareAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 Highphp-mbstringTuxCareheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 Mediumphp-mbstringTuxCareheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 Mediumphp-mbstringTuxCareA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 Criticalphp-mbstringTuxCareHeap buffer overflow in EXIF extension4.8 Mediumphp-mbstringTuxCareHeap over-read in PHP EXIF extension4.8 Mediumphp-mbstringTuxCareHeap over-read in PHP EXIF extension4.8 Mediumphp-mbstringTuxCareHeap over-read in PHP EXIF extension4.8 Mediumphp-mbstringTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...9.8 Criticalphp-mbstringTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-mbstringTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-mbstringTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-mbstringTuxCareAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 Highphp-mbstringTuxCareAn issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2....7.5 Highphp-mbstringTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...7.5 Highphp-mbstringTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-mbstringTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-mbstringTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-mbstringTuxCaregdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...8.8 Highphp-mbstringTuxCareIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 Highphp-mbstringTuxCareext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of...7.5 Highphp-mbstringTuxCareUniversity of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...7.5 High- Show moreLoading…