32 matches found
USN-5905-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled certain gzip files. An attacker could possibly use this issue to cause a denial of service. CVE-2022-31628 It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to compromise data integrity...
USN-5902-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An invalid password hash could possibly allow applications to accept any password as valid, contrary to expectations. CVE-2023-0567 It was discovered that PHP incorrectly handled resolving long paths. A remot...
DEBIAN-CVE-2023-0662
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space...
AZL-13605 CVE-2023-0662 affecting package php for versions less than 8.1.16-1
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space...
UBUNTU-CVE-2023-0662
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space...
PHP 资源管理错误漏洞
PHP is a scripting language for PHP that executes server-side. A resource management error vulnerability exists in PHP versions 8.0.X prior to 8.0.28, 8.1.X prior to 8.1.16, and 8.2.X prior to 8.2.3, which stems from the fact that too many uploaded portions of an HTTP form can lead to a denial of...
[SECURITY] [DLA 3269-1] libapreq2 security update
Debian LTS Advisory DLA-3269-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 14, 2023 https://wiki.debian.org/LTS Package : libapreq2 Version : 2.13-7deb10u2 CVE ID : CVE-2022-22728 Debian Bug : 1018191 A flaw in Apache libapreq2 versions 2.16 and earlier...
Amazon Linux AMI : libapreq2 (ALAS-2022-1637)
The version of libapreq2 installed on the remote host is prior to 2.13-38.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1637 advisory. A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A...
CVE-2022-22728
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...
CVE-2022-22728
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...
CVE-2022-22728
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...