7.0.2 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2017-12934	416		2017-08-18	2018-05-04	5.0	None	Remote	Low	Not required	None	Partial	None
ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing untrusted data, related to the zval_get_type function in Zend/zend_types.h. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
2	CVE-2017-12933	125		2017-08-18	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
3	CVE-2017-12932	416		2017-08-18	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
4	CVE-2017-11628	119	DoS Overflow	2017-07-25	2018-05-04	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives.
5	CVE-2017-11362	119	DoS Overflow	2017-07-17	2019-05-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function.
6	CVE-2017-11147	125		2017-07-10	2019-10-03	6.4	None	Remote	Low	Not required	Partial	None	Partial
In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.
7	CVE-2017-11145	200	+Info	2017-07-10	2018-05-04	5.0	None	Remote	Low	Not required	Partial	None	None
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist.
8	CVE-2017-11144	754		2017-07-10	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.
9	CVE-2017-11142	400	DoS	2017-07-10	2018-01-14	7.8	None	Remote	Low	Not required	None	None	Complete
In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.
10	CVE-2017-7890	200	+Info	2017-08-02	2018-05-04	4.3	None	Remote	Medium	Not required	Partial	None	None
The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.
11	CVE-2017-5340	190	DoS Exec Code Overflow	2017-01-11	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
12	CVE-2016-10397	20	Bypass	2017-07-10	2018-01-14	5.0	None	Remote	Low	Not required	None	Partial	None
In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:80?@good.example.com/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).
13	CVE-2016-10162	476	DoS	2017-01-24	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
14	CVE-2016-10161	125	DoS	2017-01-24	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.
15	CVE-2016-10160	119	DoS Exec Code Overflow Mem. Corr.	2017-01-24	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.
16	CVE-2016-10159	190	DoS Overflow	2017-01-24	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.
17	CVE-2016-10158	189	DoS	2017-01-24	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1.
18	CVE-2016-9936	416	DoS	2017-01-04	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834.
19	CVE-2016-9935	125	DoS Mem. Corr.	2017-01-04	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
20	CVE-2016-9934	476	DoS	2017-01-04	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
21	CVE-2016-9138	416	DoS	2017-01-04	2017-01-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup.
22	CVE-2016-9137	416	DoS	2017-01-04	2017-11-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.
23	CVE-2016-7479	416	Exec Code	2017-01-12	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.
24	CVE-2016-7478		DoS	2017-01-11	2018-01-14	5.0	None	Remote	Low	Not required	None	None	Partial
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
25	CVE-2016-7418	119	DoS Overflow	2016-09-17	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
26	CVE-2016-7417	20	DoS	2016-09-17	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.
27	CVE-2016-7416	119	DoS Overflow	2016-09-17	2018-05-04	5.0	None	Remote	Low	Not required	None	None	Partial
ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.
28	CVE-2016-7414	119	DoS Overflow	2016-09-17	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a crafted PHAR archive, related to ext/phar/util.c and ext/phar/zip.c.
29	CVE-2016-7413	416	DoS	2016-09-17	2018-05-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call.
30	CVE-2016-7412	119	DoS Overflow	2016-09-17	2018-05-04	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata.
31	CVE-2016-7134	119	DoS Overflow	2016-09-12	2017-08-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service (allocation error and heap-based buffer overflow) or possibly have unspecified other impact via a long string that is mishandled in a curl_escape call.
32	CVE-2016-7133	190	DoS Overflow	2016-09-12	2017-07-01	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Zend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc operations, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a long pathname.
33	CVE-2016-7132	476	DoS	2016-09-12	2020-11-16	5.0	None	Remote	Low	Not required	None	None	Partial
ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a stray element inside a boolean element, leading to incorrect pop processing.
34	CVE-2016-7131	476	DoS	2016-09-12	2020-11-16	5.0	None	Remote	Low	Not required	None	None	Partial
ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a tag that lacks a < (less than) character.
35	CVE-2016-7130	476	DoS	2016-09-12	2018-01-05	5.0	None	Remote	Low	Not required	None	None	Partial
The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document.
36	CVE-2016-7129	20	DoS	2016-09-12	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document.
37	CVE-2016-7128	200	+Info	2016-09-12	2018-01-05	5.0	None	Remote	Low	Not required	Partial	None	None
The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.
38	CVE-2016-7127	787	DoS	2016-09-12	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.
39	CVE-2016-7126	787	DoS	2016-09-12	2020-11-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument.
40	CVE-2016-7125	74		2016-09-12	2018-01-05	5.0	None	Remote	Low	Not required	None	Partial	None
ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection.
41	CVE-2016-7124	502	DoS	2016-09-12	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that leads to a (1) __destruct call or (2) magic method call.
42	CVE-2016-6297	119	DoS Overflow	2016-07-25	2018-01-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.
43	CVE-2016-6296	119	DoS Overflow	2016-07-25	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.
44	CVE-2016-6295	416	DoS	2016-07-25	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773.
45	CVE-2016-6294	125	DoS	2016-07-25	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument.
46	CVE-2016-6292	476	DoS	2016-07-25	2018-01-05	4.3	None	Remote	Medium	Not required	None	None	Partial
The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image.
47	CVE-2016-6291	119	DoS Overflow Mem. Corr. +Info	2016-07-25	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image.
48	CVE-2016-6290	416	DoS	2016-07-25	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization.
49	CVE-2016-6289	190	DoS Overflow	2016-07-25	2018-01-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive.
50	CVE-2016-5773	416	DoS Exec Code	2016-08-07	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

Total number of vulnerabilities : 74 Page : 1 (This Page)2