Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

81 – 90 of 644 results

CVE-2019-9639

Medium priority
Fixed

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9638

Medium priority
Fixed

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9637

Low priority
Fixed

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9025

Medium priority
Not affected

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Not affected
php7.2 — — — Not affected Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9024

Medium priority
Fixed

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9023

Medium priority
Fixed

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9022

Medium priority
Fixed

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9021

Medium priority
Fixed

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2019-9020

Medium priority
Fixed

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages

CVE-2018-20783

Low priority
Fixed

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to...

4 affected packages

php5, php7.0, php7.2, php7.3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
php5 — — — Not in release Not in release
php7.0 — — — Not in release Fixed
php7.2 — — — Fixed Not in release
php7.3 — — — Not in release Not in release
Show less packages
  1. Previous page
  2. 7
  3. 8
  4. 9
  5. 10
  6. 11
  7. Next page
Export to JSON