212 matches found
SUSE CVE-2016-7418
The phpwddxpushelement function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service invalid pointer access and out-of-bounds read or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document,...
SUSE CVE-2016-9935
The phpwddxpushelement function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service out-of-bounds read and memory corruption or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document...
SUSE CVE-2016-9934
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...
SUSE CVE-2016-10162
The phpwddxpopelement function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a...
SUSE CVE-2017-11143
In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c...
openSUSE 15 Security Update : php7 (SUSE-SU-2022:1725-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:1725-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...
The vulnerability of the php_wddx_process_data function in the PHP programming language allows a hacker to cause a service failure or potentially have other adverse effects.
The vulnerability of the phpwddxprocessdata function in the PHP programming language is related to a memory reclamation error. Exploiting this vulnerability may allow an attacker to cause service failures or potentially cause other adverse effects...
The vulnerability of the `php_wddx_push_element` function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the phpwddxpushelement function ext/wddx/wddx.c in the PHP programming language is caused by buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure due to an incorrect logical element in an XML document...
The vulnerability of the ext/wddx/wddx.c component of the PHP interpreter allows a attacker to cause a service failure.
The vulnerability of the ext/wddx/wddx.c component of the PHP interpreter is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure by using specially created serialized data in an XML document called wddxPacket...
The vulnerability of the wddx_stackdestroy function in the PHP programming language allows a hacker to trigger a service failure or potentially cause other effects.
The vulnerability of the wddxstackdestroy function ext/wddx/wddx.c in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially have other effects through an XML documen...
The vulnerability of the ext/wddx/wddx.c component of the PHP interpreter allows a attacker to cause a service failure.
The vulnerability of the ext/wddx/wddx.c component of the PHP interpreter is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures through a corrupted XML document...
The vulnerability of the wddx_deserialize() function in the PHP programming language lies in the use of memory after it is freed, allowing an attacker to trigger a denial-of-service attack.
The vulnerability of the PHP programming language interpreter is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the php_wddx_process_data function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the phpwddxprocessdata function ext/wddx/wddx.c in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures by using an invalid ISO 8601 time value...
Mageia: Security Advisory (MGASA-2016-0422)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : php7 (openSUSE-SU-2021:2872-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:2872-1 advisory. - Tar.php in ArchiveTar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issu...
CLSA-2020-1605798462 Fix of 227 CVE
Fix bug 69720: Null pointer dereference in phargetfpoffset - Fix bug 70728: Type Confusion Vulnerability in PHPtoXMLRPCworker - Fix bug 70661: Use After Free Vulnerability in WDDX Packet Deserialization - Fix bug 70741: Session WDDX Packet Deserialization Type Confusion Vulnerability - Fix bug...
Information Disclosure
php is vulnerable to information disclosure. If the wddx extension was used to import WDDX data from an untrusted source, certain WDDX input packets could expose a random portion of heap memory...
Denial Of Service (DoS)
PHP is vulnerable to denial of serviceDoS attacks. This is because an invalid free in the WDDX deserialization of boolean parameters. An attacker could inject XML for deserialization to crash the PHP interpreter which occurs in ext/wddx/wddx.c file...
Null Pointer Dereference
PHP is vulnerable to null pointer deference vulnerability. The vulnerability exists in the phpwddxpopelement function in ext/wddx/wddx.c in PHP. Remote attackers could cause a denial of service via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddxdeserializ...
PHP 7.1.x < 7.1.0 Multiple Vulnerabilities.
According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.0. It is, therefore, affected by the following vulnerabilities: - A stack consumption condition exists in the gdImageFillToBorder function of the gd.c script within the GD Graphics Library libgd. An...