5.6.18 : Security Vulnerabilities

Cpe Name:cpe:/a:php:php:5.6.18

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-9641	119	Overflow	2019-03-08	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
2	CVE-2019-9639	119	Overflow	2019-03-08	2019-06-03	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
3	CVE-2019-9638	119	Overflow	2019-03-08	2019-06-03	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
4	CVE-2019-9637	264		2019-03-08	2019-06-03	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
5	CVE-2019-9024	125		2019-02-22	2019-06-18	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.
6	CVE-2019-9023	125		2019-02-22	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
7	CVE-2019-9021	125		2019-02-22	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.
8	CVE-2019-9020	125		2019-02-22	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
9	CVE-2019-6977	119	Overflow	2019-01-26	2019-04-10	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.
10	CVE-2018-20783	125		2019-02-21	2019-05-22	5.0	None	Remote	Low	Not required	Partial	None	None
In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.
11	CVE-2018-19935	476	DoS	2018-12-07	2019-06-18	5.0	None	Remote	Low	Not required	None	None	Partial
ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.
12	CVE-2018-19396	502	DoS	2018-11-20	2019-10-02	5.0	None	Remote	Low	Not required	None	None	Partial
ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com, dotnet, or variant class.
13	CVE-2018-19395	476	DoS	2018-11-20	2018-12-27	5.0	None	Remote	Low	Not required	None	None	Partial
ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash) because com and com_safearray_proxy return NULL in com_properties_get in ext/com_dotnet/com_handlers.c, as demonstrated by a serialize call on COM("WScript.Shell").
14	CVE-2018-17082	79	XSS	2018-09-16	2019-08-19	4.3	None	Remote	Medium	Not required	None	Partial	None
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.
15	CVE-2018-15132	200	+Info	2018-08-07	2018-11-08	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.
16	CVE-2018-14883	190	Overflow	2018-08-03	2018-12-11	5.0	None	Remote	Low	Not required	None	None	Partial
An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
17	CVE-2018-10549	125		2018-04-29	2019-08-19	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exif_iif_add_value mishandles the case of a MakerNote that lacks a final '\0' character.
18	CVE-2018-10548	476	DoS	2018-04-29	2019-08-19	5.0	None	Remote	Low	Not required	None	None	Partial
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
19	CVE-2018-10547	79	XSS	2018-04-29	2019-08-19	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.
20	CVE-2018-10546	835		2018-04-29	2019-10-02	5.0	None	Remote	Low	Not required	None	None	Partial
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.
21	CVE-2018-10545	200	Bypass +Info	2018-04-29	2019-08-19	1.9	None	Local	Medium	Not required	Partial	None	None
An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.
22	CVE-2017-16642	125	+Info	2017-11-07	2019-08-19	5.0	None	Remote	Low	Not required	Partial	None	None
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
23	CVE-2016-7478		DoS	2017-01-11	2018-01-13	5.0	None	Remote	Low	Not required	None	None	Partial
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
24	CVE-2016-6297	119	DoS Overflow	2016-07-25	2018-01-04	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.
25	CVE-2016-6296	119	DoS Overflow	2016-07-25	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.
26	CVE-2016-6295	416	DoS	2016-07-25	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773.
27	CVE-2016-6294	125	DoS	2016-07-25	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument.
28	CVE-2016-6292	476	DoS	2016-07-25	2018-01-04	4.3	None	Remote	Medium	Not required	None	None	Partial
The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image.
29	CVE-2016-6291	119	DoS Overflow Mem. Corr. +Info	2016-07-25	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image.
30	CVE-2016-6290	416	DoS	2016-07-25	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization.
31	CVE-2016-6289	190	DoS Overflow	2016-07-25	2018-01-04	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive.
32	CVE-2016-5773	416	DoS Exec Code	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.
33	CVE-2016-5772	415	DoS Exec Code	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call.
34	CVE-2016-5771	416	DoS Exec Code	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.
35	CVE-2016-5770	190	DoS Overflow	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096.
36	CVE-2016-5769	190	DoS Overflow	2016-08-07	2016-11-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions.
37	CVE-2016-5768	415	DoS Exec Code	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.
38	CVE-2016-5399	787	DoS Exec Code	2017-04-21	2018-10-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
39	CVE-2016-5096	190	DoS Overflow	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument.
40	CVE-2016-5095	190	DoS Overflow	2016-08-07	2016-11-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094.
41	CVE-2016-5094	190	DoS Overflow	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.
42	CVE-2016-5093	125	DoS	2016-08-07	2018-01-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.
43	CVE-2016-4544	119	DoS Overflow	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
44	CVE-2016-4543	119	DoS Overflow	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
45	CVE-2016-4542	119	DoS Overflow	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
46	CVE-2016-4541		DoS	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
47	CVE-2016-4540		DoS	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
48	CVE-2016-4539	119	DoS Overflow	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.
49	CVE-2016-4538	20	DoS	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
50	CVE-2016-4537	20	DoS	2016-05-21	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.

Total number of vulnerabilities : 59 Page : 1 (This Page)2