php7.0 vulnerabilities (Ubuntu)
201 vulnerabilities.
php7.0Ubuntuexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...5.5 Mediumphp7.0UbuntuAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...8.8 Highphp7.0UbuntuAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...7.5 Highphp7.0UbuntuAn issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1...6.1 Mediumphp7.0UbuntuAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...7.5 Highphp7.0UbuntuAn issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x...4.7 Mediumphp7.0UbuntuIn PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there...9.8 Criticalphp7.0UbuntuAn issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20....6.5 Mediumphp7.0UbuntuAn issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x...6.1 Mediumphp7.0UbuntuIn PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension...7.5 Highphp7.0Ubuntuext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to...9.8 Criticalphp7.0UbuntuIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in...7.8 Highphp7.0UbuntuIn PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not...9.8 Criticalphp7.0UbuntuIn PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers...9.1 Criticalphp7.0UbuntuIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's...7.5 Highphp7.0UbuntuIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM...7.5 Highphp7.0UbuntuIn PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be...7.5 Highphp7.0UbuntuIn PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the...7.5 Highphp7.0UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...7.5 Highphp7.0UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp7.0UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp7.0UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp7.0UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp7.0UbuntuThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...9.8 Criticalphp7.0UbuntuThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Criticalphp7.0Ubuntu** DISPUTED ** The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers...7.5 Highphp7.0UbuntuPHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen...7.4 Highphp7.0Ubuntuphp7.0 regressionNo scorephp7.0UbuntuAn issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or...7.5 Highphp7.0UbuntuIn PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...7.5 Highphp7.0UbuntuThe php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before...7.5 Highphp7.0UbuntuThe object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before...7.5 Highphp7.0UbuntuOff-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...9.8 Criticalphp7.0UbuntuInteger overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...7.5 Highphp7.0UbuntuThe exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15...7.5 Highphp7.0UbuntuZend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that...9.8 Criticalphp7.0UbuntuIn all versions of PHP 7, during the unserialization process, resizing the 'properties' hash...9.8 Criticalphp7.0UbuntuThe unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote...9.8 Criticalphp7.0UbuntuThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14...9.8 Criticalphp7.0UbuntuPHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup...9.8 Criticalphp7.0UbuntuUse-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before...9.8 Criticalphp7.0UbuntuThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11...7.5 Highphp7.0Ubuntuext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray...9.8 Criticalphp7.0Ubuntuext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not...7.5 Highphp7.0UbuntuThe ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure...9.8 Criticalphp7.0UbuntuUse-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before...9.8 Criticalphp7.0Ubuntuext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify...8.1 Highphp7.0Ubuntuext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures,...9.8 Criticalphp7.0Ubuntuext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow,...9.8 Criticalphp7.0UbuntuZend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc...8.1 High- Show moreLoading…