php | Snyk

Direct Vulnerabilities

Known vulnerabilities in the php package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Access Restriction Bypass	*
L Information Exposure	*
L Out-of-bounds Read	*
L Heap-based Buffer Overflow	*
L NULL Pointer Dereference	*
L Out-of-bounds Read	*
L Improper Input Validation	*
L Insecure Temporary File	*
L Out-of-bounds Read	*
L NULL Pointer Dereference	*
L Out-of-bounds Read	*
L Integer Overflow or Wraparound	*
L Use After Free	*
L Improper Input Validation	*
L Out-of-bounds Read	*
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Read	*
L Buffer Overflow	*
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	*
L Buffer Overflow	*
L Information Exposure	*
L Heap-based Buffer Overflow	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Out-of-bounds Read	*
L Server-Side Request Forgery (SSRF)	*
L Out-of-bounds Read	*
L Improper Input Validation	*
L Use After Free	*
L Improper Input Validation	*
L Out-of-bounds Read	*
L Out-of-bounds Read	*
L Use After Free	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Read	*
L Integer Overflow or Wraparound	*
L Out-of-bounds Read	*
L Uncontrolled Recursion	*
L Improper Input Validation	*
L Null Byte Interaction Error (Poison Null Byte)	*
L XML External Entity (XXE) Injection	*
L Uncontrolled Recursion	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L Link Following	*
L Integer Overflow or Wraparound	*
L NULL Pointer Dereference	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L Use After Free	*
L Insecure Temporary File	*
M Race Condition	*
M Race Condition	*
L Memory Leak	*
L Missing Release of Resource after Effective Lifetime	*
M NULL Pointer Dereference	*
M Out-of-Bounds	*
M Improper Access Control	*
M Out-of-Bounds	*
M Improper Initialization	*
M Out-of-bounds Read	*
M Incorrect Privilege Assignment	*
M Out-of-Bounds	*
M Heap-based Buffer Overflow	*
M Out-of-bounds Read	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Improper Null Termination	*
M Allocation of Resources Without Limits or Throttling	*
M Use After Free	*
M Out-of-bounds Read	*
M Cross-site Scripting (XSS)	*
M OS Command Injection	*
M NULL Pointer Dereference	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Out-of-bounds Write	*
M Heap-based Buffer Overflow	*
M Out-of-bounds Read	*
M Out-of-bounds Write	*
M Out-of-bounds Read	*
M Improper Input Validation	*
M Use After Free	*
M Improper Input Validation	*
M Missing Initialization of a Variable	*
M Use After Free	*
M Incorrect Check of Function Return Value	*
M Improper Input Validation	*
M Out-of-bounds Write	*
M Use After Free	*
M Out-of-bounds Read	*
M Information Exposure	*
M Use After Free	*
M Use After Free	*
M NULL Pointer Dereference	*
M Integer Overflow or Wraparound	*
M NULL Pointer Dereference	*
M Deserialization of Untrusted Data	*
M Use After Free	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Write	*
M Improper Input Validation	*
M Out-of-bounds Read	*
M Integer Overflow or Wraparound	*
M Unchecked Error Condition	*
M NULL Pointer Dereference	*
M Arbitrary Code Injection	*
M Use After Free	*
M Improper Input Validation	*
M Integer Overflow or Wraparound	*
M Stack-based Buffer Overflow	*
M NULL Pointer Dereference	*
M CVE-2016-7478	*
M Use After Free	*
M Unchecked Return Value	*
M Use After Free	*
M Use After Free	*
M Improper Input Validation	*
M Improper Handling of Syntactically Invalid Structure	*
M Integer Overflow or Wraparound	*
M Out-of-Bounds	*
M NULL Pointer Dereference	*
M Detection of Error Condition Without Action	*
M Incorrect Calculation	*
M Improper Input Validation	*
M Missing Initialization of a Variable	*
M Out-of-bounds Read	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Use After Free	*
M Heap-based Buffer Overflow	*
M HTTP Response Splitting	*
M Stack-based Buffer Overflow	*
M Cryptographic Issues	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Integer Overflow or Wraparound	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Null Byte Interaction Error (Poison Null Byte)	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Algorithmic Complexity	*
M Null Byte Interaction Error (Poison Null Byte)	*
M Integer Overflow or Wraparound	*
M Null Byte Interaction Error (Poison Null Byte)	*
M Improper Input Validation	*
M Out-of-Bounds	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Improper Access Control	*
M NULL Pointer Dereference	*
M Untrusted Pointer Dereference	*
M Integer Overflow or Wraparound	*
M CVE-2015-6832	*
M Use After Free	*
M Null Byte Interaction Error (Poison Null Byte)	*
M Access Restriction Bypass	*
M Session Fixation	*
H Use After Free	<0:8.3.19-1.el10_0.2
H Use After Free	<0:8.3.19-1.el10_0.2
H Use After Free	<0:8.3.36-1.el10_2
H Use After Free	<0:8.3.36-1.el10_2
H Uncontrolled Recursion	<0:8.3.36-1.el10_2
H Use After Free	<0:8.5.12-1.hum1
H Use After Free	<0:8.5.12-1.hum1
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	<0:8.5.11-2.hum1
M Improper Certificate Validation	*
M Improper Certificate Validation	<0:8.5.11-2.hum1
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	<0:8.5.11-2.hum1
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	<0:8.5.11-2.hum1
M Information Exposure	*
M Improper Verification of Source of a Communication Channel	*
M Improper Verification of Source of a Communication Channel	<0:8.5.11-2.hum1
M Information Exposure	<0:8.5.11-2.hum1
M Out-of-bounds Read	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	<0:8.5.11-2.hum1
M Integer Overflow or Wraparound	<0:8.5.11-2.hum1
M Out-of-bounds Read	*
M Improper Handling of File Names	<0:8.5.11-2.hum1
M Out-of-bounds Read	<0:8.5.11-2.hum1
H Uncontrolled Recursion	<0:8.5.11-2.hum1
H Expired Pointer Dereference	<0:8.5.9-1.hum1
M Unchecked Input for Loop Condition	<0:8.3.33-1.el10_2
H SQL Injection	<0:8.3.33-1.el10_2
M Heap-based Buffer Overflow	<0:8.3.32-1.el10_2
M Heap-based Buffer Overflow	<0:8.5.8-2.hum1
M Unchecked Input for Loop Condition	<0:8.5.9-1.hum1
C SQL Injection	<0:8.5.9-1.hum1
C Out-of-bounds Write	<0:8.5.9-1.hum1
H Expired Pointer Dereference	<0:8.3.31-1.el10_2
M Expired Pointer Dereference	<0:8.3.31-1.el10_2
H SQL Injection	*
M NULL Pointer Dereference	<0:8.3.31-1.el10_2
H Integer Overflow or Wraparound	<0:8.3.31-1.el10_2
M Numeric Range Comparison Without Minimum Check	<0:8.3.31-1.el10_2
H NULL Pointer Dereference	<0:8.3.31-1.el10_2
M Cross-site Scripting (XSS)	<0:8.3.31-1.el10_2
M Cross-site Scripting (XSS)	<0:8.5.6-1.hum1
M Numeric Range Comparison Without Minimum Check	<0:8.5.6-1.hum1
M Out-of-bounds Write	<0:8.5.5-1.1.hum1
H NULL Pointer Dereference	<0:8.5.5-1.1.hum1
L Out-of-bounds Read	<0:8.5.5-1.1.hum1
M Out-of-bounds Write	<0:8.3.29-1.el10_1
H NULL Pointer Dereference	<0:8.3.29-1.el10_1
L Out-of-bounds Read	<0:8.3.29-1.el10_1
M Out-of-bounds Write	<0:8.3.19-1.el10_0.1
H NULL Pointer Dereference	<0:8.3.19-1.el10_0.1
L Server-Side Request Forgery (SSRF)	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
L Improper Output Neutralization for Logs	*
M Improper Input Validation	<0:8.3.19-1.el10_0
M Improper Input Validation	<0:8.3.19-1.el10_0
M Improper Input Validation	<0:8.3.19-1.el10_0
M Improper Input Validation	<0:8.3.19-1.el10_0
M Incorrect Calculation of Buffer Size	<0:8.3.19-1.el10_0
H Use After Free	<0:8.3.19-1.el10_0
L Server-Side Request Forgery (SSRF)	*
L Resource Exhaustion	*
L Link Following	*
L Insecure Temporary File	*
L Insecure Temporary File	*
L Access Restriction Bypass	*
M Information Exposure	*
M Stack-based Buffer Overflow	*
M Out-of-bounds Read	*
M Missing Initialization of a Variable	*
M CVE-2016-7478	*
M Unchecked Error Condition	*
M Improper Handling of Syntactically Invalid Structure	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	<0:5.1.6-3.el4s1.8
L Improper Input Validation	<0:5.1.6-3.el4s1.7
H Out-of-Bounds	<0:5.1.6-3.el4s1.7
M Integer Overflow or Wraparound	<0:5.1.6-3.el4s1.8
L CVE-2007-4670	<0:5.1.6-3.el4s1.8
L Information Exposure	<0:5.1.6-3.el4s1.10
M CVE-2007-5898	<0:5.1.6-3.el4s1.10
M CVE-2006-4484	<0:5.1.4-1.el4s1.4
L Insufficient Entropy	<0:5.1.6-3.el4s1.10
L Numeric Errors	<0:5.1.6-3.el4s1.10
M CVE-2008-2051	<0:5.1.6-3.el4s1.10
C Out-of-Bounds	<0:5.1.6-27.el5_6.7
C Out-of-Bounds	<0:5.1.6-23.6.el5_3
L NULL Pointer Dereference	*
M Use After Free	*
M Out-of-Bounds	*
M Improper Input Validation	*
M Numeric Errors	<0:5.1.4-1.el4s1.4
M Out-of-bounds Write	<0:5.1.4-1.el4s1.4
L CVE-2006-4485	<0:5.1.4-1.el4s1.4
L CVE-2006-4020	<0:5.1.4-1.el4s1.4
H CVE-2007-0910	<0:5.1.6-3.el4s1.5
M Out-of-Bounds	<0:5.1.6-3.el4s1.5
M Uncontrolled Recursion	<0:5.1.6-3.el4s1.6
L CVE-2007-0909	<0:5.1.6-3.el4s1.5
H Out-of-Bounds	<0:5.1.6-3.el4s1.5
L CVE-2007-0907	<0:5.1.6-3.el4s1.5
L CVE-2007-1718	<0:5.1.6-3.el4s1.6
M Improper Input Validation	<0:5.1.6-3.el4s1.5
L CVE-2007-1583	<0:5.1.6-3.el4s1.6
M Use After Free	*
M CVE-2015-6832	*
M Directory Traversal	*
M Off-by-one Error	*
M NULL Pointer Dereference	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Use After Free	*
L Information Exposure	*
C Arbitrary Command Injection	<0:5.1.6-23.3.el5_3
H Arbitrary Code Injection	<0:5.1.4-1.el4s1.4
M Numeric Errors	<0:5.1.6-3.el4s1.6
M Improper Input Validation	*
M Improper Input Validation	*
M Incorrect Check of Function Return Value	*
M Incorrect Calculation	*
L Improper Input Validation	*
L Out-of-bounds Read	*
C Stack-based Buffer Overflow	<0:4.3.9-3.38.el4
L Use After Free	*
L Use After Free	*
L Use After Free	*
L Use After Free	*
C Out-of-bounds Write	<0:5.1.6-23.4.el5_3
C Out-of-bounds Write	<0:4.3.9-3.37.el4
C Out-of-bounds Write	<0:4.3.2-56.ent
L Memory Leak	*
M Use After Free	*
M Missing Initialization of a Variable	*
H CVE-2006-5465	<0:5.1.4-1.el4s1.5
H Deserialization of Untrusted Data	<0:5.1.6-3.el4s1.5
L Buffer Overflow	<0:5.1.6-3.el4s1.6
H CVE-2007-1825	<0:5.1.6-3.el4s1.5
L Arbitrary Code Injection	<0:5.1.6-3.el4s1.10
H CVE-2007-1380	<0:5.1.6-3.el4s1.5
M Out-of-Bounds	<0:5.1.6-3.el4s1.7
M Integer Overflow or Wraparound	<0:5.1.6-3.el4s1.8
L Improper Input Validation	<0:5.1.6-3.el4s1.8
L Improper Input Validation	<0:5.1.6-3.el4s1.8
L CVE-2007-4658	<0:5.1.6-3.el4s1.8
M Access Restriction Bypass	<0:5.1.6-3.el4s1.9
C Incorrect Calculation of Buffer Size	*
C Incorrect Calculation of Buffer Size	*
C Incorrect Calculation of Buffer Size	<0:5.1.6-23.5.el5_3
C Incorrect Calculation of Buffer Size	<0:4.3.9-3.37.el4.1
C Incorrect Calculation of Buffer Size	<0:4.3.2-57.ent

Vulnerability

Vulnerable Version

Access Restriction Bypass