Netapp » Storage Automation Store : Security Vulnerabilities, CVEs, Published In 2018 (Overflow)
An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
Max CVSS
7.5
EPSS Score
0.53%
Published
2018-08-03
Updated
2020-08-24
A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.
Max CVSS
5.9
EPSS Score
0.92%
Published
2018-03-26
Updated
2021-06-06
PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string.
Max CVSS
9.8
EPSS Score
0.93%
Published
2018-08-02
Updated
2022-07-20
3 vulnerabilities found