Search CVE reports

Toggle filters

101 – 110 of 248 results

CVE-2017-9118

Medium priority

Some fixes available 7 of 10

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

6 affected packages

php5, php7.0, php7.2, php7.4, php8.0, php8.1

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release Not in release
php7.0 Not in release Not in release Not in release Not in release
php7.2 Not in release Not in release Not in release Fixed
php7.4 Not in release Not in release Fixed Not in release
php8.0 Not in release Not in release Not in release Not in release
php8.1 Not in release Fixed Not in release Not in release
Show less packages

CVE-2018-14851

Low priority
Fixed

exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application...

3 affected packages

php5, php7.0, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2018-12882

Medium priority
Fixed

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is...

4 affected packages

php5, php7.0, php7.1, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.1 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2018-10549

Medium priority
Fixed

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because...

4 affected packages

php5, php7.0, php7.1, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.1 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2018-10548

Medium priority
Fixed

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application...

4 affected packages

php5, php7.0, php7.1, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.1 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2018-10547

Medium priority
Fixed

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for...

4 affected packages

php5, php7.0, php7.1, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.1 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2018-10546

Medium priority
Fixed

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

4 affected packages

php5, php7.0, php7.1, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.1 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2018-10545

Medium priority
Fixed

An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl...

4 affected packages

php5, php7.0, php7.1, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.1 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2018-7584

Medium priority
Fixed

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function...

4 affected packages

php5, php7.0, php7.1, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — — — Not in release
php7.0 — — — Not in release
php7.1 — — — Not in release
php7.2 — — — Fixed
Show less packages

CVE-2015-9253

Low priority
Fixed

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec,...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 — Not in release Not in release Not in release
php7.0 — Not in release Not in release Not in release
php7.2 — Not in release Not in release Fixed
php7.3 — Not in release Not in release Not in release
Show less packages
  1. Previous page
  2. 9
  3. 10
  4. 11
  5. 12
  6. 13
  7. Next page
Export to JSON