php7.2 vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the php7.2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M CVE-2024-2756	<7.2.24-0ubuntu0.18.04.17+esm3
M CVE-2024-3096	<7.2.24-0ubuntu0.18.04.17+esm3
M Out-of-Bounds	<7.2.24-0ubuntu0.18.04.17+esm2
M XML External Entity (XXE) Injection	<7.2.24-0ubuntu0.18.04.17+esm2
M Use of Insufficiently Random Values	<7.2.24-0ubuntu0.18.04.17+esm1
M Allocation of Resources Without Limits or Throttling	<7.2.24-0ubuntu0.18.04.17
M Resource Exhaustion	<7.2.24-0ubuntu0.18.04.17
M Use of Password Hash With Insufficient Computational Effort	<7.2.24-0ubuntu0.18.04.17
M CVE-2022-31631	<7.2.24-0ubuntu0.18.04.16
M Integer Overflow or Wraparound	<7.2.24-0ubuntu0.18.04.15
M CVE-2022-31629	<7.2.24-0ubuntu0.18.04.15
M Loop with Unreachable Exit Condition ('Infinite Loop')	<7.2.24-0ubuntu0.18.04.15
M Release of Invalid Pointer or Reference	<7.2.24-0ubuntu0.18.04.12
M Buffer Overflow	<7.2.24-0ubuntu0.18.04.12
L CVE-2021-21707	<7.2.24-0ubuntu0.18.04.11
H Out-of-bounds Write	<7.2.24-0ubuntu0.18.04.10
L Improper Input Validation	<7.2.24-0ubuntu0.18.04.8
L NULL Pointer Dereference	<7.2.24-0ubuntu0.18.04.8
M Out-of-Bounds	<7.2.24-0ubuntu0.18.04.8
M Improper Input Validation	<7.2.24-0ubuntu0.18.04.8
M Reliance on Cookies without Validation and Integrity Checking	<7.2.24-0ubuntu0.18.04.7
M Inadequate Encryption Strength	<7.2.24-0ubuntu0.18.04.7
L Use After Free	<7.2.24-0ubuntu0.18.04.8
M Integer Overflow or Wraparound	<7.2.24-0ubuntu0.18.04.6
M Out-of-bounds Read	<7.2.24-0ubuntu0.18.04.4
M CVE-2020-7066	<7.2.24-0ubuntu0.18.04.4
L Improper Preservation of Permissions	<7.2.24-0ubuntu0.18.04.4
L NULL Pointer Dereference	<7.2.24-0ubuntu0.18.04.4
M Out-of-bounds Read	<7.2.24-0ubuntu0.18.04.3
M Out-of-bounds Read	<7.2.24-0ubuntu0.18.04.3
L Out-of-bounds Read	<7.2.24-0ubuntu0.18.04.2
L Out-of-bounds Read	<7.2.24-0ubuntu0.18.04.2
L Arbitrary Code Injection	<7.2.24-0ubuntu0.18.04.2
L Out-of-bounds Read	<7.2.24-0ubuntu0.18.04.2
M Out-of-bounds Write	<7.2.24-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.19-0ubuntu0.18.04.2
M Out-of-bounds Read	<7.2.19-0ubuntu0.18.04.2
L Improper Input Validation	*
M Out-of-bounds Read	<7.2.19-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.19-0ubuntu0.18.04.1
L Out-of-bounds Read	<7.2.19-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.17-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.17-0ubuntu0.18.04.1
L Out-of-Bounds	<7.2.15-0ubuntu0.18.04.2
M Out-of-Bounds	<7.2.15-0ubuntu0.18.04.2
M Out-of-Bounds	<7.2.15-0ubuntu0.18.04.2
L Access Restriction Bypass	<7.2.15-0ubuntu0.18.04.2
M Out-of-Bounds	<7.2.15-0ubuntu0.18.04.2
M Out-of-Bounds	<7.2.15-0ubuntu0.18.04.2
M Out-of-bounds Read	<7.2.15-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.15-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.15-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.15-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.15-0ubuntu0.18.04.1
L Out-of-bounds Read	<7.2.15-0ubuntu0.18.04.1
M NULL Pointer Dereference	<7.2.15-0ubuntu0.18.04.1
M Arbitrary Argument Injection	<7.2.15-0ubuntu0.18.04.1
M Cross-site Scripting (XSS)	<7.2.10-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.10-0ubuntu0.18.04.1
L Out-of-bounds Read	<7.2.10-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.24-0ubuntu0.18.04.11
M Integer Overflow or Wraparound	<7.2.24-0ubuntu0.18.04.11
M Use After Free	<7.2.7-0ubuntu0.18.04.2
M Loop with Unreachable Exit Condition ('Infinite Loop')	<7.2.5-0ubuntu0.18.04.1
M NULL Pointer Dereference	<7.2.5-0ubuntu0.18.04.1
M Information Exposure	<7.2.5-0ubuntu0.18.04.1
M Cross-site Scripting (XSS)	<7.2.5-0ubuntu0.18.04.1
M Out-of-bounds Read	<7.2.5-0ubuntu0.18.04.1
M Out-of-Bounds	<7.2.3-1ubuntu1
L Resource Exhaustion	<7.2.10-0ubuntu0.18.04.1
L Resource Exhaustion	<7.2.24-0ubuntu0.18.04.11
L Improper Input Validation	<7.2.24-0ubuntu0.18.04.11
L Use After Free	*