Search CVE reports

Toggle filters

71 – 80 of 644 results

CVE-2019-13224

Medium priority

Some fixes available 15 of 39

A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression....

8 affected packages

groonga, libevhtp, libonig, mudlet, php5...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
groonga Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
libevhtp Not affected Not affected Not affected Not affected Vulnerable
libonig Fixed Fixed Fixed Fixed Fixed
mudlet Not in release Not in release Vulnerable Vulnerable Vulnerable
php5 Not in release Not in release Not in release Not in release Not in release
php7.0 Not in release Not in release Not in release Not in release Not affected
php7.2 Not in release Not in release Not in release Not affected Not in release
php7.3 Not in release Not in release Not in release Not in release Not in release
Show all 8 packages Show less packages

CVE-2019-11038

Low priority

Some fixes available 3 of 5

When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply...

5 affected packages

libgd2, php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libgd2 — — Not affected Fixed Fixed
php5 — — Not in release Not in release Not in release
php7.0 — — Not in release Not in release Not affected
php7.2 — — Not in release Not affected Not in release
php7.3 — — Not in release Not in release Not in release
Show less packages

CVE-2019-11040

Medium priority
Fixed

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-11039

Medium priority
Fixed

Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-11036

Low priority
Fixed

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-11035

Medium priority
Fixed

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information...

3 affected packages

php5, php7.0, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
Show less packages

CVE-2019-11034

Medium priority
Fixed

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information...

3 affected packages

php5, php7.0, php7.2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
Show less packages

CVE-2019-9675

Low priority
Fixed

** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9641

Medium priority
Fixed

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9640

Medium priority
Fixed

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages
  1. Previous page
  2. 6
  3. 7
  4. 8
  5. 9
  6. 10
  7. Next page
Export to JSON