rpm package
almalinux/php-ffi
pkg:rpm/almalinux/php-ffi
Vulnerabilities (69)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-32610 | Hig | 7.1 | < 7.4.30-1.module_el8.7.0+3286+227f3cf0 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | Jul 30, 2021 | In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. | |
| CVE-2021-21702 | Med | 5.3 | < 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | Feb 15, 2021 | In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash. | |
| CVE-2020-7071 | Med | 5.3 | < 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | Feb 15, 2021 | In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL | |
| CVE-2020-36193 | Hig | 7.5 | KEV | < 7.4.19-4.module_el8.6.0+3238+624bf8b8 | 7.4.19-4.module_el8.6.0+3238+624bf8b8 | Jan 18, 2021 | Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. |
| CVE-2020-28949 | Hig | 7.8 | KEV | < 7.4.19-4.module_el8.6.0+3238+624bf8b8 | 7.4.19-4.module_el8.6.0+3238+624bf8b8 | Nov 19, 2020 | Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed. |
| CVE-2020-28948 | Hig | 7.8 | < 7.4.19-4.module_el8.6.0+3238+624bf8b8 | 7.4.19-4.module_el8.6.0+3238+624bf8b8 | Nov 19, 2020 | Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. | |
| CVE-2020-7070 | Med | 4.3 | < 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | Oct 2, 2020 | In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading t | |
| CVE-2020-7069 | Med | 5.4 | < 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | Oct 2, 2020 | In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data. | |
| CVE-2020-7068 | Med | 4.8 | < 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | 7.4.19-3.module_el8.6.0+2976+8b9a0d08 | Sep 9, 2020 | In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure. |
- affected < 7.4.30-1.module_el8.7.0+3286+227f3cf0fixed 7.4.30-1.module_el8.7.0+3286+227f3cf0
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
- affected < 7.4.19-3.module_el8.6.0+2976+8b9a0d08fixed 7.4.19-3.module_el8.6.0+2976+8b9a0d08
In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash.
- affected < 7.4.19-3.module_el8.6.0+2976+8b9a0d08fixed 7.4.19-3.module_el8.6.0+2976+8b9a0d08
In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL
- affected < 7.4.19-4.module_el8.6.0+3238+624bf8b8fixed 7.4.19-4.module_el8.6.0+3238+624bf8b8
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
- affected < 7.4.19-4.module_el8.6.0+3238+624bf8b8fixed 7.4.19-4.module_el8.6.0+3238+624bf8b8
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
- affected < 7.4.19-4.module_el8.6.0+3238+624bf8b8fixed 7.4.19-4.module_el8.6.0+3238+624bf8b8
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
- affected < 7.4.19-3.module_el8.6.0+2976+8b9a0d08fixed 7.4.19-3.module_el8.6.0+2976+8b9a0d08
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading t
- affected < 7.4.19-3.module_el8.6.0+2976+8b9a0d08fixed 7.4.19-3.module_el8.6.0+2976+8b9a0d08
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
- affected < 7.4.19-3.module_el8.6.0+2976+8b9a0d08fixed 7.4.19-3.module_el8.6.0+2976+8b9a0d08
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
Page 4 of 4