Search CVE reports
81 – 90 of 656 results
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All...
5 affected packages
libgd2, php5, php7.0, php7.2, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
libgd2 | — | — | — | Fixed |
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Not affected |
php7.3 | — | — | — | Not in release |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All...
5 affected packages
libgd2, php5, php7.0, php7.2, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
libgd2 | — | — | — | Fixed |
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Not affected |
php7.3 | — | — | — | Not in release |
Some fixes available 3 of 5
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply...
5 affected packages
libgd2, php5, php7.0, php7.2, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
libgd2 | — | — | Not affected | Fixed |
php5 | — | — | Not in release | Not in release |
php7.0 | — | — | Not in release | Not in release |
php7.2 | — | — | Not in release | Not affected |
php7.3 | — | — | Not in release | Not in release |
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will...
4 affected packages
php5, php7.0, php7.2, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Fixed |
php7.3 | — | — | — | Not in release |
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to...
4 affected packages
php7.0, php7.2, php5, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Fixed |
php5 | — | — | — | Not in release |
php7.3 | — | — | — | Not in release |
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information...
4 affected packages
php5, php7.0, php7.2, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Fixed |
php7.3 | — | — | — | Not in release |
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information...
3 affected packages
php5, php7.0, php7.2
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Fixed |
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information...
3 affected packages
php5, php7.0, php7.2
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Fixed |
An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an...
4 affected packages
php7.2, php5, php7.0, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
php7.2 | — | — | — | Fixed |
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.3 | — | — | — | Not in release |
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
4 affected packages
php5, php7.0, php7.2, php7.3
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
php5 | — | — | — | Not in release |
php7.0 | — | — | — | Not in release |
php7.2 | — | — | — | Fixed |
php7.3 | — | — | — | Not in release |