php7.4 vulnerabilities (Ubuntu)
78 vulnerabilities.
php7.4UbuntuDoS vulnerability when parsing multipart request body7.5 Highphp7.4Ubuntupassword_verify() always returns true for some invalid hashes7.7 Highphp7.4UbuntuPDO::quote() may return unquoted string9.1 Criticalphp7.4UbuntuOOB read due to insufficient input validation in imageloadfont()6.5 Mediumphp7.4UbuntuBuffer overflow in sponge queue functions9.8 Criticalphp7.4Ubuntu$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Mediumphp7.4Ubuntuphar wrapper can occur dos when using quine gzip file2.3 Lowphp7.4Ubuntumysqlnd/pdo password buffer overflow7.5 Highphp7.4UbuntuFreeing unallocated memory in php_pgsql_free_params()8.1 Highphp7.4UbuntuUAF due to php_filter_float() failing8.2 Highphp7.4UbuntuSpecial characters break path parsing in XML functions5.3 Mediumphp7.4UbuntuPHP-FPM memory access in root process leading to privilege escalation7.8 Highphp7.4UbuntuIncorrect URL validation in FILTER_VALIDATE_URL4.3 Mediumphp7.4UbuntuMultiple vulnerabilities in Firebird client extension5.0 Mediumphp7.4UbuntuNull Dereference in SoapClient5.3 Mediumphp7.4UbuntuFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 Mediumphp7.4UbuntuPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp7.4UbuntuWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp7.4UbuntuUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp7.4UbuntuTemporary files are not cleaned after OOM when parsing HTTP request data5.3 Mediumphp7.4Ubuntuget_headers() silently truncates after a null byte5.3 Mediumphp7.4Ubuntumb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 Highphp7.4UbuntuUse-of-uninitialized-value in exif6.5 Mediumphp7.4Ubuntumain/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by...7.5 Highphp7.4UbuntuPHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and...9.8 Criticalphp7.4UbuntuPHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.7.5 Highphp7.4UbuntuThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...9.8 Criticalphp7.4UbuntuThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Critical