Vulnerabilities

TI-2019-08941 CVE-2019-11936 · GHSA-jqrc-77wc-2g85

Various APC functions accept keys containing null bytes as input, leading to premature…

MEDIUM 45

Various APC functions accept keys containing null bytes as input, leading to premature truncation of input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01476 Published 2019-12-04 Fixed in 3.30.12 CWE-626

TI-2019-08940 CVE-2019-11935 · GHSA-447v-pq45-237q

MEDIUM 45

Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01476 Published 2019-12-04 Fixed in 3.30.12 CWE-125

TI-2019-08935 CVE-2019-11930 · GHSA-5h4f-x39p-f6v8

MEDIUM 48

An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03248 Published 2019-12-04 Fixed in 3.30.12 CWE-763