Known vulnerabilities in php-pear (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:php-pear_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 24
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php-pear (Ubuntu package) php-pear (Ubuntu package) is affected by 24 known vulnerabilities: 5 high, 19 medium Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55101 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-32610
CWE-59 High
No
No
1:1.10.1+submodules+notgz-6ubuntu0.3+esm1, 1:1.10.5+submodules+notgz-1ubuntu1.18.04.4, 1:1.10.9+submodules+notgz-1ubuntu0.20.04.3, 1:1.10.9+submodules+notgz-1.1ubuntu1.1 20.07.2021 SB2021072062
SB2021072221
SB2021102617
and 12 more
#VU49907 - UNIX Symbolic Link (Symlink) Following
CVE-2020-36193
CWE-61 High
Available
Exploited
1:1.10.1+submodules+notgz-6ubuntu0.3, 1:1.10.5+submodules+notgz-1ubuntu1.18.04.3, 1:1.10.9+submodules+notgz-1ubuntu0.20.04.2, 1:1.10.9+submodules+notgz-1ubuntu0.20.10.2 18.01.2021 SB2021012112
SB2021012113
SB2021012410
and 20 more
#VU48668 - Improper input validation
CVE-2020-28949
CWE-20 High
Available
Exploited
1:1.10.1+submodules+notgz-6ubuntu0.2, 1:1.10.5+submodules+notgz-1ubuntu1.18.04.2, 1:1.10.9+submodules+notgz-1ubuntu0.20.04.1, 1:1.10.9+submodules+notgz-1ubuntu0.20.10.1 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 20 more
#VU48669 - Deserialization of Untrusted Data
CVE-2020-28948
CWE-502 High
Available
No
1:1.10.1+submodules+notgz-6ubuntu0.2, 1:1.10.5+submodules+notgz-1ubuntu1.18.04.2, 1:1.10.9+submodules+notgz-1ubuntu0.20.04.1, 1:1.10.9+submodules+notgz-1ubuntu0.20.10.1 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 21 more
#VU45157 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-0441
CWE-59 High
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 29.03.2011 SB2011021901
SB2015042903
SB2012021008
#VU45183 - Memory corruption
CVE-2011-1464
CWE-119 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 20.03.2011 SB2011011103
SB2011101004
SB2015042903
#VU45185 - Improper input validation
CVE-2011-1466
CWE-20 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 20.03.2011 SB2011011103
SB2011101004
SB2015042903
#VU45186 - Improper input validation
CVE-2011-1467
CWE-20 Medium
Available
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 20.03.2011 SB2011011103
SB2011101004
SB2015042903
#VU45187 - Resource Management Errors
CVE-2011-1468
CWE-399 Medium
Available
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 20.03.2011 SB2011011103
SB2011101004
SB2015042903
#VU45192 - Improper input validation
CVE-2011-0421
CWE-20 Medium
Available
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 20.03.2011 SB2011011103
SB2011073002
SB2011101004
and 1 more
#VU45193 - Out-of-bounds read
CVE-2011-0708
CWE-125 Medium
Available
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 20.03.2011 SB2011011103
SB2011101004
SB2015042903
#VU45220 - Resource Management Errors
CVE-2011-1148
CWE-399 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 18.03.2011 SB2011021901
SB2011101004
SB2011082504
and 1 more
#VU45221 - Use of Externally-Controlled Format String
CVE-2011-1153
CWE-134 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 17.03.2011 SB2011011103
SB2011101004
SB2015042903
#VU45227 - Improper input validation
CVE-2011-1092
CWE-20 Medium
Available
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 15.03.2011 SB2011011103
SB2011101004
SB2015042903
#VU45253 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-1072
CWE-59 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 03.03.2011 SB2011030304
SB2015042903
#VU45260 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-1144
CWE-59 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 03.03.2011 SB2011030306
SB2015042903
#VU45307 - Improper input validation
CVE-2011-0420
CWE-20 Medium
Available
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 19.02.2011 SB2011021901
SB2011101004
SB2015042903
#VU45430 - Resource Management Errors
CVE-2010-4697
CWE-399 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 18.01.2011 SB2011011803
SB2011101004
SB2015042903
#VU45431 - Stack-based buffer overflow
CVE-2010-4698
CWE-121 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 18.01.2011 SB2011011803
SB2011101004
SB2015042903
#VU45434 - Improper input validation
CVE-2006-7243
CWE-20 Medium
No
No
5.1.2-1ubuntu3.22, 5.2.4-2ubuntu5.15, 5.2.10.dfsg.1-2ubuntu6.9, 5.3.2-1ubuntu4.8, 5.3.3-1ubuntu9.4, 5.3.5-1ubuntu7.1 18.01.2011 SB2011011802
SB2015061203
SB2014031903
and 4 more


Showing elements 1 - 20 out of 24