php | Snyk

Direct Vulnerabilities

Known vulnerabilities in the php package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	<0:8.5.11-2.hum1
M Improper Certificate Validation	*
M Improper Certificate Validation	<0:8.5.11-2.hum1
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	<0:8.5.11-2.hum1
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	<0:8.5.11-2.hum1
M Information Exposure	*
M Improper Verification of Source of a Communication Channel	*
M Improper Verification of Source of a Communication Channel	<0:8.5.11-2.hum1
M Information Exposure	<0:8.5.11-2.hum1
M Out-of-bounds Read	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	<0:8.5.11-2.hum1
M Integer Overflow or Wraparound	<0:8.5.11-2.hum1
M Out-of-bounds Read	*
M Improper Handling of File Names	<0:8.5.11-2.hum1
M Out-of-bounds Read	<0:8.5.11-2.hum1
H Uncontrolled Recursion	*
H Uncontrolled Recursion	<0:8.5.11-2.hum1
H Expired Pointer Dereference	<0:8.5.9-1.hum1
M Unchecked Input for Loop Condition	<0:8.3.33-1.el10_2
H SQL Injection	<0:8.3.33-1.el10_2
M Heap-based Buffer Overflow	<0:8.3.32-1.el10_2
M Heap-based Buffer Overflow	<0:8.5.8-2.hum1
M Unchecked Input for Loop Condition	<0:8.5.9-1.hum1
C SQL Injection	<0:8.5.9-1.hum1
C Out-of-bounds Write	<0:8.5.9-1.hum1
H Expired Pointer Dereference	<0:8.3.31-1.el10_2
M Expired Pointer Dereference	<0:8.3.31-1.el10_2
H SQL Injection	*
M NULL Pointer Dereference	<0:8.3.31-1.el10_2
H Integer Overflow or Wraparound	<0:8.3.31-1.el10_2
M Numeric Range Comparison Without Minimum Check	<0:8.3.31-1.el10_2
H NULL Pointer Dereference	<0:8.3.31-1.el10_2
M Cross-site Scripting (XSS)	<0:8.3.31-1.el10_2
M Cross-site Scripting (XSS)	<0:8.5.6-1.hum1
M Numeric Range Comparison Without Minimum Check	<0:8.5.6-1.hum1
M Out-of-bounds Write	<0:8.5.5-1.1.hum1
H NULL Pointer Dereference	<0:8.5.5-1.1.hum1
L Out-of-bounds Read	<0:8.5.5-1.1.hum1
M Out-of-bounds Write	<0:8.3.29-1.el10_1
H NULL Pointer Dereference	<0:8.3.29-1.el10_1
L Out-of-bounds Read	<0:8.3.29-1.el10_1
M Out-of-bounds Write	<0:8.3.19-1.el10_0.1
H NULL Pointer Dereference	<0:8.3.19-1.el10_0.1
L Server-Side Request Forgery (SSRF)	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
L Improper Output Neutralization for Logs	*
M Improper Input Validation	<0:8.3.19-1.el10_0
M Improper Input Validation	<0:8.3.19-1.el10_0
M Improper Input Validation	<0:8.3.19-1.el10_0
M Improper Input Validation	<0:8.3.19-1.el10_0
M Incorrect Calculation of Buffer Size	<0:8.3.19-1.el10_0
H Use After Free	<0:8.3.19-1.el10_0
L Server-Side Request Forgery (SSRF)	*
L Resource Exhaustion	*
L Link Following	*
L Insecure Temporary File	*
L Insecure Temporary File	*
L Access Restriction Bypass	*
M Information Exposure	*
M Stack-based Buffer Overflow	*
M Out-of-bounds Read	*
M Missing Initialization of a Variable	*
M CVE-2016-7478	*
M Unchecked Error Condition	*
M Improper Handling of Syntactically Invalid Structure	*
H Resource Management Errors	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	<0:5.1.6-3.el4s1.8
L Improper Input Validation	<0:5.1.6-3.el4s1.7
H Out-of-Bounds	<0:5.1.6-3.el4s1.7
M Integer Overflow or Wraparound	<0:5.1.6-3.el4s1.8
L CVE-2007-4670	<0:5.1.6-3.el4s1.8
L Information Exposure	<0:5.1.6-3.el4s1.10
M CVE-2007-5898	<0:5.1.6-3.el4s1.10
M CVE-2006-4484	<0:5.1.4-1.el4s1.4
L Insufficient Entropy	<0:5.1.6-3.el4s1.10
L Numeric Errors	<0:5.1.6-3.el4s1.10
M CVE-2008-2051	<0:5.1.6-3.el4s1.10
C Out-of-Bounds	<0:5.1.6-27.el5_6.7
C Out-of-Bounds	<0:5.1.6-23.6.el5_3
M Improper Input Validation	*
L NULL Pointer Dereference	*
M Use After Free	*
M Out-of-Bounds	*
M Improper Input Validation	*
M Numeric Errors	<0:5.1.4-1.el4s1.4
M Out-of-bounds Write	<0:5.1.4-1.el4s1.4
L CVE-2006-4485	<0:5.1.4-1.el4s1.4
L CVE-2006-4020	<0:5.1.4-1.el4s1.4
H CVE-2007-0910	<0:5.1.6-3.el4s1.5
M Out-of-Bounds	<0:5.1.6-3.el4s1.5
M Uncontrolled Recursion	<0:5.1.6-3.el4s1.6
L CVE-2007-0909	<0:5.1.6-3.el4s1.5
H Out-of-Bounds	<0:5.1.6-3.el4s1.5
L CVE-2007-0907	<0:5.1.6-3.el4s1.5
L CVE-2007-1718	<0:5.1.6-3.el4s1.6
M Improper Input Validation	<0:5.1.6-3.el4s1.5
L CVE-2007-1583	<0:5.1.6-3.el4s1.6
M Use After Free	*
M CVE-2015-6832	*
M Directory Traversal	*
M Off-by-one Error	*
M NULL Pointer Dereference	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Use After Free	*
L Information Exposure	*
C Arbitrary Command Injection	*
C Arbitrary Command Injection	<0:5.1.6-23.3.el5_3
H Arbitrary Code Injection	<0:5.1.4-1.el4s1.4
M Numeric Errors	<0:5.1.6-3.el4s1.6
M Improper Input Validation	*
M Improper Input Validation	*
M Incorrect Check of Function Return Value	*
M Incorrect Calculation	*
L Improper Input Validation	*
L Out-of-bounds Read	*
C Stack-based Buffer Overflow	<0:4.3.9-3.38.el4
L Use After Free	*
L Use After Free	*
L Use After Free	*
L Use After Free	*
C Out-of-bounds Write	<0:5.1.6-23.4.el5_3
C Out-of-bounds Write	<0:4.3.9-3.37.el4
C Out-of-bounds Write	<0:4.3.2-56.ent
L Memory Leak	*
M Null Byte Interaction Error (Poison Null Byte)	*
M Access Restriction Bypass	*
M Use After Free	*
M Missing Initialization of a Variable	*
H CVE-2006-5465	<0:5.1.4-1.el4s1.5
H Deserialization of Untrusted Data	<0:5.1.6-3.el4s1.5
L Buffer Overflow	<0:5.1.6-3.el4s1.6
H CVE-2007-1825	<0:5.1.6-3.el4s1.5
L Arbitrary Code Injection	<0:5.1.6-3.el4s1.10
H CVE-2007-1380	<0:5.1.6-3.el4s1.5
M Out-of-Bounds	<0:5.1.6-3.el4s1.7
M Integer Overflow or Wraparound	<0:5.1.6-3.el4s1.8
L Improper Input Validation	<0:5.1.6-3.el4s1.8
L Improper Input Validation	<0:5.1.6-3.el4s1.8
L CVE-2007-4658	<0:5.1.6-3.el4s1.8
M Access Restriction Bypass	<0:5.1.6-3.el4s1.9
C Incorrect Calculation of Buffer Size	*
C Incorrect Calculation of Buffer Size	*
C Incorrect Calculation of Buffer Size	<0:5.1.6-23.5.el5_3
C Incorrect Calculation of Buffer Size	<0:4.3.9-3.37.el4.1
C Incorrect Calculation of Buffer Size	<0:4.3.2-57.ent

Vulnerability

Vulnerable Version

Integer Overflow or Wraparound