php7 vulnerabilities (openSUSE)
172 vulnerabilities.
php7openSUSEUse-of-uninitialized-value in exif6.5 Mediumphp7openSUSEFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 Mediumphp7openSUSENull Pointer Dereference in PHP Session Upload Progress7.5 Highphp7openSUSEUse-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6...9.8 Criticalphp7openSUSEglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 Mediumphp7openSUSEOOB read in php_strip_tags_ex6.5 Mediumphp7openSUSEUse-after-free in exif parsing under memory sanitizer4.8 Mediumphp7openSUSEHeap-buffer-overflow READ in exif4.8 Mediumphp7openSUSEBuffer underflow in bc_shift_addsub3.7 Lowphp7openSUSEDirectoryIterator class silently truncates after a null byte3.7 Lowphp7openSUSEUnderflow in PHP-FPM can lead to RCE8.7 Highphp7openSUSEheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 Mediumphp7openSUSEheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 Mediumphp7openSUSEHeap buffer overflow in EXIF extension4.8 Mediumphp7openSUSEOut-of-bounds read in iconv.c4.2 Mediumphp7openSUSEHeap over-read in PHP EXIF extension4.8 Mediumphp7openSUSEHeap over-read in PHP EXIF extension4.8 Mediumphp7openSUSEHeap over-read in PHP EXIF extension4.8 Mediumphp7openSUSE** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3....8.1 Highphp7openSUSEAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...9.8 Criticalphp7openSUSEAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp7openSUSEAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp7openSUSEAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp7openSUSEAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 Highphp7openSUSEAn issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2....7.5 Highphp7openSUSEAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...7.5 Highphp7openSUSEAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp7openSUSEAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp7openSUSEAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp7openSUSEArchive_Tar contains Potential RCE if filename starts with phar://8.8 Highphp7openSUSEIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 Highphp7openSUSEext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of...7.5 Highphp7openSUSEThe Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x...6.1 Mediumphp7openSUSELibgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function...8.8 Highphp7openSUSEPHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and...9.8 Criticalphp7openSUSEexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...5.5 Mediumphp7openSUSEexif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a...9.8 Criticalphp7openSUSEAn issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20....6.5 Mediumphp7openSUSEThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Criticalphp7openSUSEOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...5.9 Mediumphp7openSUSEThe sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement...7.5 Highphp7openSUSEThe sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle...7.5 Highphp7openSUSESQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which...7.5 Highphp7openSUSEThe pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile...5.5 Mediumphp7openSUSEThe compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile...7.8 Highphp7openSUSEInteger overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as...7.5 Highphp7openSUSEMultiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before...7.5 Highphp7openSUSEThe build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5...5.0 Mediumphp7openSUSEUse-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the...7.5 Highphp7openSUSE** DISPUTED ** The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in...7.5 High- Show moreLoading…