php-mysqlnd vulnerabilities (TuxCare)
74 vulnerabilities.
php-mysqlndTuxCarepassword_verify() always returns true for some invalid hashes7.7 Highphp-mysqlndTuxCarePDO::quote() may return unquoted string9.1 Criticalphp-mysqlndTuxCareOOB read due to insufficient input validation in imageloadfont()6.5 Mediumphp-mysqlndTuxCareBuffer overflow in sponge queue functions9.8 Criticalphp-mysqlndTuxCare$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Mediumphp-mysqlndTuxCarephar wrapper can occur dos when using quine gzip file2.3 Lowphp-mysqlndTuxCaremysqlnd/pdo password buffer overflow7.5 Highphp-mysqlndTuxCareFreeing unallocated memory in php_pgsql_free_params()8.1 Highphp-mysqlndTuxCareUAF due to php_filter_float() failing8.2 Highphp-mysqlndTuxCareSpecial characters break path parsing in XML functions5.3 Mediumphp-mysqlndTuxCarePHP-FPM memory access in root process leading to privilege escalation7.8 Highphp-mysqlndTuxCareIncorrect URL validation in FILTER_VALIDATE_URL4.3 Mediumphp-mysqlndTuxCareNull Dereference in SoapClient5.3 Mediumphp-mysqlndTuxCareFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 Mediumphp-mysqlndTuxCarePHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-mysqlndTuxCareWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-mysqlndTuxCareUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-mysqlndTuxCareAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 Highphp-mysqlndTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp-mysqlndTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp-mysqlndTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp-mysqlndTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp-mysqlndTuxCareThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...9.8 Criticalphp-mysqlndTuxCareThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Critical