php-pecl-zip vulnerabilities (TuxCare)
8 vulnerabilities.
-
php-pecl-zipTuxCare UAF due to php_filter_float() failing 8.2 High -
php-pecl-zipTuxCare PHP-FPM memory access in root process leading to privilege escalation 7.8 High -
php-pecl-zipTuxCare Incorrect URL validation in FILTER_VALIDATE_URL 4.3 Medium -
php-pecl-zipTuxCare Null Dereference in SoapClient 5.3 Medium -
php-pecl-zipTuxCare FILTER_VALIDATE_URL accepts URLs with invalid userinfo 5.3 Medium -
php-pecl-zipTuxCare PHP parses encoded cookie names so malicious `__Host-` cookies can be sent 4.3 Medium -
php-pecl-zipTuxCare Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV 5.4 Medium -
php-pecl-zipTuxCare Use of freed hash key in the phar_parse_zipfile function 4.8 Medium