php-pear vulnerabilities (TuxCare)
8 vulnerabilities.
-
php-pearTuxCare UAF due to php_filter_float() failing 8.2 High -
php-pearTuxCare PHP-FPM memory access in root process leading to privilege escalation 7.8 High -
php-pearTuxCare Incorrect URL validation in FILTER_VALIDATE_URL 4.3 Medium -
php-pearTuxCare Null Dereference in SoapClient 5.3 Medium -
php-pearTuxCare FILTER_VALIDATE_URL accepts URLs with invalid userinfo 5.3 Medium -
php-pearTuxCare PHP parses encoded cookie names so malicious `__Host-` cookies can be sent 4.3 Medium -
php-pearTuxCare Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV 5.4 Medium -
php-pearTuxCare Use of freed hash key in the phar_parse_zipfile function 4.8 Medium