rh-php70-php-xml

Direct Vulnerabilities

Known vulnerabilities in the rh-php70-php-xml package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Resource Exhaustion

*
  • M
Improper Input Validation

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

<0:7.0.27-1.el7
  • M
Use After Free

<0:7.0.27-1.el7
  • L
Directory Traversal

*
  • L
NULL Pointer Dereference

*
  • C
Out-of-bounds Write

<0:7.0.27-2.el7
  • M
Cross-site Scripting (XSS)

<0:7.0.27-1.el7
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Use After Free

*
  • M
OS Command Injection

*
  • M
Out-of-bounds Write

<0:7.0.27-1.el7
  • M
Heap-based Buffer Overflow

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

<0:7.0.27-1.el7
  • M
Out-of-bounds Write

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

<0:7.0.27-1.el7
  • M
Improper Input Validation

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

*
  • L
Server-Side Request Forgery (SSRF)

*
  • L
Improper Input Validation

*
  • L
Improper Input Validation

*
  • L
Improper Input Validation

*
  • M
Use After Free

*
  • M
Missing Initialization of a Variable

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

<0:7.0.27-1.el7
  • M
Improper Input Validation

<0:7.0.27-1.el7
  • M
Out-of-Bounds

<0:7.0.27-1.el7
  • M
Improper Input Validation

<0:7.0.27-1.el7
  • L
Uncontrolled Recursion

*
  • M
Information Exposure

<0:7.0.27-1.el7
  • M
Incorrect Check of Function Return Value

<0:7.0.27-1.el7
  • M
Use After Free

<0:7.0.27-1.el7
  • M
Use After Free

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

<0:7.0.27-1.el7
  • M
NULL Pointer Dereference

<0:7.0.27-1.el7
  • M
Improper Input Validation

<0:7.0.27-1.el7
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Stack-based Buffer Overflow

*
  • M
Missing Initialization of a Variable

*
  • M
CVE-2016-7478

*
  • M
Use After Free

<0:7.0.27-1.el7
  • M
Unchecked Return Value

<0:7.0.27-1.el7
  • M
NULL Pointer Dereference

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

<0:7.0.27-1.el7
  • M
Stack-based Buffer Overflow

<0:7.0.27-1.el7
  • M
Heap-based Buffer Overflow

<0:7.0.27-1.el7
  • M
Use After Free

<0:7.0.27-1.el7
  • M
Unchecked Error Condition

*
  • M
Integer Overflow or Wraparound

<0:7.0.27-1.el7
  • M
Improper Input Validation

<0:7.0.27-1.el7
  • M
Improper Handling of Syntactically Invalid Structure

*
  • M
NULL Pointer Dereference

<0:7.0.27-1.el7
  • M
Off-by-one Error

<0:7.0.27-1.el7
  • M
Integer Overflow or Wraparound

<0:7.0.27-1.el7
  • M
Incorrect Calculation

<0:7.0.27-1.el7
  • M
Out-of-bounds Read

<0:7.0.27-1.el7
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:7.0.27-1.el7
  • M
Improper Input Validation

*