php5 vulnerabilities (Ubuntu)
282 vulnerabilities.
php5Ubuntu** DISPUTED ** Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP...7.5 Highphp5UbuntuThe phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x...8.2 Highphp5UbuntuUse-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x...9.8 Criticalphp5UbuntuThe make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5...7.1 Highphp5UbuntuStack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x...9.8 Criticalphp5UbuntuThe gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5...9.1 Criticalphp5UbuntuThe file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in...7.3 Highphp5Ubuntuext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a...5.9 Mediumphp5UbuntuThe make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5...9.8 Criticalphp5UbuntuOff-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5...6.8 Mediumphp5UbuntuThe phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14...6.8 Mediumphp5UbuntuThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...7.5 Highphp5UbuntuThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...7.5 Highphp5UbuntuThe SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5...7.3 Highphp5UbuntuThe session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13...9.8 Criticalphp5UbuntuMultiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x...9.8 Criticalphp5UbuntuDirectory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28...7.5 Highphp5UbuntuUse-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP...7.3 Highphp5UbuntuMultiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6...7.3 Highphp5UbuntuStack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5...7.3 Highphp5UbuntuThe phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5...9.8 Criticalphp5UbuntuThe mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5...7.5 Highphp5UbuntuThe mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4...7.5 Highphp5UbuntuThe SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5...7.5 Highphp5UbuntuPHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...7.5 Highphp5UbuntuDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it cannot be considered a security issue in the originally named…No scorephp5UbuntuThe php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before...6.8 Mediumphp5UbuntuThe move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5...5.0 Mediumphp5UbuntuMultiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before...7.5 Highphp5UbuntuThe build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5...5.0 Mediumphp5UbuntuUse-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the...7.5 Highphp5UbuntuDirectory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in...4.3 Mediumphp5Ubuntusapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x...7.5 Highphp5UbuntuThe php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before...7.5 Highphp5UbuntuInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before...9.8 Criticalphp5UbuntuThe exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x...9.8 Criticalphp5UbuntuThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...9.8 Criticalphp5UbuntuPHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...9.8 Criticalphp5UbuntuThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...9.8 Criticalphp5UbuntuThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...9.8 Criticalphp5UbuntuPHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...6.5 Mediumphp5UbuntuThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...5.0 Mediumphp5UbuntuThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...7.5 Highphp5UbuntuAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...5.0 Mediumphp5UbuntuInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...7.5 Highphp5UbuntuThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...5.0 Mediumphp5UbuntuPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...5.3 Mediumphp5UbuntuPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...6.5 Mediumphp5UbuntuMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...7.5 Highphp5UbuntuUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 High- Show moreLoading…