7.0.0 : Security Vulnerabilities

Cpe Name:cpe:/a:php:php:7.0.0

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-10549	125		2018-04-29	2018-07-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exif_iif_add_value mishandles the case of a MakerNote that lacks a final '\0' character.
2	CVE-2018-10548	476	DoS	2018-04-29	2018-07-06	5.0	None	Remote	Low	Not required	None	None	Partial
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
3	CVE-2018-10547	79	XSS	2018-04-29	2018-07-06	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.
4	CVE-2018-10546	400		2018-04-29	2018-07-06	5.0	None	Remote	Low	Not required	None	None	Partial
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.
5	CVE-2018-10545	200	Bypass +Info	2018-04-29	2018-07-06	1.9	None	Local	Medium	Not required	Partial	None	None
An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.
6	CVE-2018-7584	119	Overflow	2018-03-01	2018-07-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string.
7	CVE-2018-5712	79	XSS	2018-01-16	2018-05-16	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.
8	CVE-2018-5711	400		2018-01-16	2018-05-03	4.3	None	Remote	Medium	Not required	None	None	Partial
gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.
9	CVE-2017-16642	125	+Info	2017-11-07	2018-05-03	5.0	None	Remote	Low	Not required	Partial	None	None
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
10	CVE-2017-12934	416		2017-08-17	2018-05-03	5.0	None	Remote	Low	Not required	None	Partial	None
ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing untrusted data, related to the zval_get_type function in Zend/zend_types.h. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
11	CVE-2017-12933	119	Overflow	2017-08-17	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
12	CVE-2017-12932	416		2017-08-17	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
13	CVE-2017-11628	119	DoS Overflow	2017-07-25	2018-05-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives.
14	CVE-2017-11362	119	DoS Overflow	2017-07-17	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function.
15	CVE-2017-11147	119	Overflow	2017-07-10	2018-05-03	6.4	None	Remote	Low	Not required	Partial	None	Partial
In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.
16	CVE-2017-11145	200	+Info	2017-07-10	2018-05-03	5.0	None	Remote	Low	Not required	Partial	None	None
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist.
17	CVE-2017-11144	754		2017-07-10	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.
18	CVE-2017-11142	400	DoS	2017-07-10	2018-01-13	7.8	None	Remote	Low	Not required	None	None	Complete
In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.
19	CVE-2017-7890	200	+Info	2017-08-02	2018-05-03	4.3	None	Remote	Medium	Not required	Partial	None	None
The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.
20	CVE-2017-5340	190	DoS Exec Code Overflow	2017-01-11	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
21	CVE-2016-10712	20		2018-02-09	2018-03-20	5.0	None	Remote	Low	Not required	None	Partial	None
In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a "$uri = stream_get_meta_data(fopen($file, "r"))['uri']" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.
22	CVE-2016-10397	20	Bypass	2017-07-10	2018-01-13	5.0	None	Remote	Low	Not required	None	Partial	None
In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:[email protected]/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).
23	CVE-2016-10162	476	DoS	2017-01-24	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
24	CVE-2016-10161	125	DoS	2017-01-24	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.
25	CVE-2016-10160	119	DoS Exec Code Overflow Mem. Corr.	2017-01-24	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.
26	CVE-2016-10159	190	DoS Overflow	2017-01-24	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.
27	CVE-2016-10158	189	DoS	2017-01-24	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1.
28	CVE-2016-9936	416	DoS	2017-01-04	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834.
29	CVE-2016-9935	125	DoS Mem. Corr.	2017-01-04	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
30	CVE-2016-9934	476	DoS	2017-01-04	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
31	CVE-2016-9138	416	DoS	2017-01-04	2017-01-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup.
32	CVE-2016-9137	416	DoS	2017-01-04	2017-11-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.
33	CVE-2016-7479	416	Exec Code	2017-01-11	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.
34	CVE-2016-7478		DoS	2017-01-11	2018-01-13	5.0	None	Remote	Low	Not required	None	None	Partial
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
35	CVE-2016-7418	119	DoS Overflow	2016-09-17	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
36	CVE-2016-7417	20	DoS	2016-09-17	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.
37	CVE-2016-7416	119	DoS Overflow	2016-09-17	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.
38	CVE-2016-7414	119	DoS Overflow	2016-09-17	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a crafted PHAR archive, related to ext/phar/util.c and ext/phar/zip.c.
39	CVE-2016-7413	416	DoS	2016-09-17	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call.
40	CVE-2016-7412	119	DoS Overflow	2016-09-17	2018-05-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata.
41	CVE-2016-7134	119	DoS Overflow	2016-09-11	2017-08-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service (allocation error and heap-based buffer overflow) or possibly have unspecified other impact via a long string that is mishandled in a curl_escape call.
42	CVE-2016-7133	190	DoS Overflow	2016-09-11	2017-06-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Zend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc operations, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a long pathname.
43	CVE-2016-7132	476	DoS	2016-09-11	2018-01-04	5.0	None	Remote	Low	Not required	None	None	Partial
ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a stray element inside a boolean element, leading to incorrect pop processing.
44	CVE-2016-7131	476	DoS	2016-09-11	2018-01-04	5.0	None	Remote	Low	Not required	None	None	Partial
ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a tag that lacks a < (less than) character.
45	CVE-2016-7130	476	DoS	2016-09-11	2018-01-04	5.0	None	Remote	Low	Not required	None	None	Partial
The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document.
46	CVE-2016-7129	20	DoS	2016-09-11	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document.
47	CVE-2016-7128	200	+Info	2016-09-11	2018-01-04	5.0	None	Remote	Low	Not required	Partial	None	None
The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.
48	CVE-2016-7127	787	DoS	2016-09-11	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.
49	CVE-2016-7126	787	DoS	2016-09-11	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument.
50	CVE-2016-7125	74		2016-09-11	2018-01-04	5.0	None	Remote	Low	Not required	None	Partial	None
ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection.

Total number of vulnerabilities : 90 Page : 1 (This Page)2