Search for packages
Package details: pkg:alpm/archlinux/php@7.0.13-1
purl pkg:alpm/archlinux/php@7.0.13-1
Next non-vulnerable version 7.1.1-0
Latest non-vulnerable version 8.1.7-1
Risk 4.4
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-4bjr-smu3-aaah
Aliases:
CVE-2016-9935
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
7.1.1-0
Affected by 0 other vulnerabilities.
VCID-fxfh-uqgw-aaaa
Aliases:
CVE-2017-5340
Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
7.1.1-0
Affected by 0 other vulnerabilities.
VCID-nfma-shxp-aaaj
Aliases:
CVE-2016-9936
The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834.
7.1.1-0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (7)
Vulnerability Summary Aliases
VCID-2tge-77hh-aaaa Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value. CVE-2016-9933
VCID-5aug-72yr-aaab ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string. CVE-2016-9934
VCID-89gd-h6gs-aaak Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call. CVE-2016-8670
VCID-hrh1-34bm-aaaq PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup. CVE-2016-9138
VCID-nepf-h3cq-aaaa Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls. CVE-2016-7568
VCID-uk9b-bduf-aaas Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876. CVE-2016-7478
VCID-yrcw-8xnb-aaac The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image. CVE-2016-6911

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:19.223226+00:00 Arch Linux Importer Fixing VCID-yrcw-8xnb-aaac https://security.archlinux.org/AVG-58 36.0.0
2025-03-28T07:46:19.202574+00:00 Arch Linux Importer Fixing VCID-uk9b-bduf-aaas https://security.archlinux.org/AVG-58 36.0.0
2025-03-28T07:46:19.181823+00:00 Arch Linux Importer Fixing VCID-nepf-h3cq-aaaa https://security.archlinux.org/AVG-58 36.0.0
2025-03-28T07:46:19.161217+00:00 Arch Linux Importer Fixing VCID-89gd-h6gs-aaak https://security.archlinux.org/AVG-58 36.0.0
2025-03-28T07:46:19.140573+00:00 Arch Linux Importer Fixing VCID-hrh1-34bm-aaaq https://security.archlinux.org/AVG-58 36.0.0
2025-03-28T07:46:19.119437+00:00 Arch Linux Importer Fixing VCID-2tge-77hh-aaaa https://security.archlinux.org/AVG-58 36.0.0
2025-03-28T07:46:19.098965+00:00 Arch Linux Importer Fixing VCID-5aug-72yr-aaab https://security.archlinux.org/AVG-58 36.0.0
2025-03-28T07:46:16.658562+00:00 Arch Linux Importer Affected by VCID-4bjr-smu3-aaah https://security.archlinux.org/AVG-105 36.0.0
2025-03-28T07:46:16.638041+00:00 Arch Linux Importer Affected by VCID-nfma-shxp-aaaj https://security.archlinux.org/AVG-105 36.0.0
2025-03-28T07:46:16.616891+00:00 Arch Linux Importer Affected by VCID-fxfh-uqgw-aaaa https://security.archlinux.org/AVG-105 36.0.0
2025-01-16T14:51:08.477434+00:00 Arch Linux Importer Fixing VCID-yrcw-8xnb-aaac https://security.archlinux.org/AVG-58 35.1.0
2025-01-16T14:51:08.454106+00:00 Arch Linux Importer Fixing VCID-uk9b-bduf-aaas https://security.archlinux.org/AVG-58 35.1.0
2025-01-16T14:51:08.430515+00:00 Arch Linux Importer Fixing VCID-nepf-h3cq-aaaa https://security.archlinux.org/AVG-58 35.1.0
2025-01-16T14:51:08.407097+00:00 Arch Linux Importer Fixing VCID-89gd-h6gs-aaak https://security.archlinux.org/AVG-58 35.1.0
2025-01-16T14:51:08.383533+00:00 Arch Linux Importer Fixing VCID-hrh1-34bm-aaaq https://security.archlinux.org/AVG-58 35.1.0
2025-01-16T14:51:08.360369+00:00 Arch Linux Importer Fixing VCID-2tge-77hh-aaaa https://security.archlinux.org/AVG-58 35.1.0
2025-01-16T14:51:08.336492+00:00 Arch Linux Importer Fixing VCID-5aug-72yr-aaab https://security.archlinux.org/AVG-58 35.1.0
2025-01-16T14:51:08.306155+00:00 Arch Linux Importer Affected by VCID-4bjr-smu3-aaah https://security.archlinux.org/AVG-105 35.1.0
2025-01-16T14:51:08.283381+00:00 Arch Linux Importer Affected by VCID-nfma-shxp-aaaj https://security.archlinux.org/AVG-105 35.1.0
2025-01-16T14:51:08.260727+00:00 Arch Linux Importer Affected by VCID-fxfh-uqgw-aaaa https://security.archlinux.org/AVG-105 35.1.0
2024-09-18T02:01:31.055844+00:00 Arch Linux Importer Fixing VCID-yrcw-8xnb-aaac https://security.archlinux.org/AVG-58 34.0.1
2024-09-18T02:01:31.029922+00:00 Arch Linux Importer Fixing VCID-uk9b-bduf-aaas https://security.archlinux.org/AVG-58 34.0.1
2024-09-18T02:01:31.004022+00:00 Arch Linux Importer Fixing VCID-nepf-h3cq-aaaa https://security.archlinux.org/AVG-58 34.0.1
2024-09-18T02:01:30.977823+00:00 Arch Linux Importer Fixing VCID-89gd-h6gs-aaak https://security.archlinux.org/AVG-58 34.0.1
2024-09-18T02:01:30.950951+00:00 Arch Linux Importer Fixing VCID-hrh1-34bm-aaaq https://security.archlinux.org/AVG-58 34.0.1
2024-09-18T02:01:30.928471+00:00 Arch Linux Importer Fixing VCID-2tge-77hh-aaaa https://security.archlinux.org/AVG-58 34.0.1
2024-09-18T02:01:30.906660+00:00 Arch Linux Importer Fixing VCID-5aug-72yr-aaab https://security.archlinux.org/AVG-58 34.0.1
2024-09-18T02:01:27.953400+00:00 Arch Linux Importer Affected by VCID-4bjr-smu3-aaah https://security.archlinux.org/AVG-105 34.0.1
2024-09-18T02:01:27.923566+00:00 Arch Linux Importer Affected by VCID-nfma-shxp-aaaj https://security.archlinux.org/AVG-105 34.0.1
2024-09-18T02:01:27.900239+00:00 Arch Linux Importer Affected by VCID-fxfh-uqgw-aaaa https://security.archlinux.org/AVG-105 34.0.1
2024-01-12T23:41:41.586002+00:00 Arch Linux Importer Fixing VCID-yrcw-8xnb-aaac https://security.archlinux.org/AVG-58 34.0.0rc2
2024-01-12T23:41:41.566526+00:00 Arch Linux Importer Fixing VCID-uk9b-bduf-aaas https://security.archlinux.org/AVG-58 34.0.0rc2
2024-01-12T23:41:41.546952+00:00 Arch Linux Importer Fixing VCID-nepf-h3cq-aaaa https://security.archlinux.org/AVG-58 34.0.0rc2
2024-01-12T23:41:41.527402+00:00 Arch Linux Importer Fixing VCID-89gd-h6gs-aaak https://security.archlinux.org/AVG-58 34.0.0rc2
2024-01-12T23:41:41.507854+00:00 Arch Linux Importer Fixing VCID-hrh1-34bm-aaaq https://security.archlinux.org/AVG-58 34.0.0rc2
2024-01-12T23:41:41.488314+00:00 Arch Linux Importer Fixing VCID-2tge-77hh-aaaa https://security.archlinux.org/AVG-58 34.0.0rc2
2024-01-12T23:41:41.468736+00:00 Arch Linux Importer Fixing VCID-5aug-72yr-aaab https://security.archlinux.org/AVG-58 34.0.0rc2
2024-01-12T23:41:41.444360+00:00 Arch Linux Importer Affected by VCID-4bjr-smu3-aaah https://security.archlinux.org/AVG-105 34.0.0rc2
2024-01-12T23:41:41.424608+00:00 Arch Linux Importer Affected by VCID-nfma-shxp-aaaj https://security.archlinux.org/AVG-105 34.0.0rc2
2024-01-12T23:41:41.404776+00:00 Arch Linux Importer Affected by VCID-fxfh-uqgw-aaaa https://security.archlinux.org/AVG-105 34.0.0rc2
2024-01-03T22:27:40.458252+00:00 Arch Linux Importer Fixing VCID-yrcw-8xnb-aaac https://security.archlinux.org/AVG-58 34.0.0rc1
2024-01-03T22:27:40.431795+00:00 Arch Linux Importer Fixing VCID-uk9b-bduf-aaas https://security.archlinux.org/AVG-58 34.0.0rc1
2024-01-03T22:27:40.405421+00:00 Arch Linux Importer Fixing VCID-nepf-h3cq-aaaa https://security.archlinux.org/AVG-58 34.0.0rc1
2024-01-03T22:27:40.375755+00:00 Arch Linux Importer Fixing VCID-89gd-h6gs-aaak https://security.archlinux.org/AVG-58 34.0.0rc1
2024-01-03T22:27:40.349600+00:00 Arch Linux Importer Fixing VCID-hrh1-34bm-aaaq https://security.archlinux.org/AVG-58 34.0.0rc1
2024-01-03T22:27:40.323207+00:00 Arch Linux Importer Fixing VCID-2tge-77hh-aaaa https://security.archlinux.org/AVG-58 34.0.0rc1
2024-01-03T22:27:40.296683+00:00 Arch Linux Importer Fixing VCID-5aug-72yr-aaab https://security.archlinux.org/AVG-58 34.0.0rc1
2024-01-03T22:27:37.580936+00:00 Arch Linux Importer Affected by VCID-4bjr-smu3-aaah https://security.archlinux.org/AVG-105 34.0.0rc1
2024-01-03T22:27:37.552230+00:00 Arch Linux Importer Affected by VCID-nfma-shxp-aaaj https://security.archlinux.org/AVG-105 34.0.0rc1
2024-01-03T22:27:37.524039+00:00 Arch Linux Importer Affected by VCID-fxfh-uqgw-aaaa https://security.archlinux.org/AVG-105 34.0.0rc1