Known vulnerabilities in php7.2 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
php7.2 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:php7.2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
26
Public exploits:
4
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.2.24-0ubuntu0.18.04.17+esm12
7.4.3-4ubuntu2.29+esm3
8.1.2-1ubuntu2.23
8.3.6-0ubuntu0.24.04.6
8.4.5-1ubuntu1.2
8.4.11-1ubuntu1.1
Ubuntu Pro
7.2.24-0ubuntu0.18.04.17
7.2.24-0ubuntu0.18.04.16
7.2.24-0ubuntu0.18.04.15
7.2.24-0ubuntu0.18.04.13
7.2.24-0ubuntu0.18.04.12
7.2.24-0ubuntu0.18.04.11
7.2.24-0ubuntu0.18.04.10
7.2.24-0ubuntu0.18.04.9
7.2.24-0ubuntu0.18.04.8
7.2.24-0ubuntu0.18.04.7
7.2.24-0ubuntu0.18.04.6
7.2.24-0ubuntu0.18.04.5
7.2.24
7.2.3
7.2.24-0ubuntu0.18.04.4
7.2.24-0ubuntu0.18.04.3
7.2.24-0ubuntu0.19.04.2
7.2.24-0ubuntu0.18.04.2
7.2.24-0ubuntu0.19.04.1
7.2.24-0ubuntu0.18.04.1
7.2.19-0ubuntu2
7.2.19-0ubuntu0.19.04.2
7.2.19-0ubuntu0.18.04.2
7.2.19-0ubuntu1
7.2.19-0ubuntu0.19.04.1
7.2.19-0ubuntu0.18.10.1
7.2.19-0ubuntu0.18.04.1
7.2.17-0ubuntu0.19.04.1
7.2.17-0ubuntu0.18.10.1
7.2.17-0ubuntu0.18.04.1
7.2.15-0ubuntu3
7.2.15-0ubuntu0.18.10.2
7.2.15-0ubuntu0.18.04.2
7.2.5-1
7.2.6-1
7.2.7-1
7.2.7-2
7.2.15-0ubuntu2
7.2.15-0ubuntu1
7.2.15-0ubuntu0.18.10.1
7.2.15-0ubuntu0.18.04.1
7.2.11-3build2
7.2.11-3build1
7.2.4-1
7.2.8-1
7.2.8-2
7.2.9-1
7.2.10-1
7.2.11-1
7.2.11-2
7.2.11-3
7.2.10-0ubuntu1
7.2.10-0ubuntu0.18.04.1
7.2.7-0ubuntu2
7.2.7-0ubuntu1
7.2.7-0ubuntu0.18.04.2
7.2.7-0ubuntu0.18.04.1
7.2.5-0ubuntu0.18.04.1
7.2.2-2
7.2.2-3
7.2.3-1
7.2.3-1ubuntu1
7.2.2-1ubuntu2
7.2.2-1
7.2.2-1ubuntu1
7.2.1-1ubuntu2
7.2.0~alpha3-1
7.2.0~beta1-1
7.2.0~beta2-1
7.2.0~beta2-2
7.2.0~beta3-1
7.2.0~beta3-2
7.2.0~rc1-1
7.2.0~rc2-1
7.2.0~rc3-1
7.2.0~rc4-1
7.2.0~rc4-2
7.2.0~rc5-1
7.2.0~rc6-1
7.2.0-1
7.2.0-2
7.2.1-1
7.2.1-1ubuntu1
Vulnerabilities (26)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120272 - Missing release of memory after effective lifetime CVE-2025-14177 |
CWE-401 | Medium | 7.2.24-0ubuntu0.18.04.17+esm12, 7.4.3-4ubuntu2.29+esm3, 8.1.2-1ubuntu2.23, 8.3.6-0ubuntu0.24.04.6, 8.4.5-1ubuntu1.2, 8.4.11-1ubuntu1.1 | 23.12.2025 |
SB2025122340 SB2025122342 SB2026010709 and 20 more |
||
| #VU120271 - Heap-based Buffer Overflow CVE-2025-14178 |
CWE-122 | High | 7.2.24-0ubuntu0.18.04.17+esm12, 7.4.3-4ubuntu2.29+esm3, 8.1.2-1ubuntu2.23, 8.3.6-0ubuntu0.24.04.6, 8.4.5-1ubuntu1.2, 8.4.11-1ubuntu1.1 | 23.12.2025 |
SB2025122340 SB2025122342 SB2026010709 and 33 more |
||
| #VU120270 - NULL Pointer Dereference CVE-2025-14180 |
CWE-476 | Medium | 7.2.24-0ubuntu0.18.04.17+esm12, 7.4.3-4ubuntu2.29+esm3, 8.1.2-1ubuntu2.23, 8.3.6-0ubuntu0.24.04.6, 8.4.5-1ubuntu1.2, 8.4.11-1ubuntu1.1 | 23.12.2025 |
SB2025122340 SB2025122342 SB2026010709 and 18 more |
||
| #VU100672 - Integer overflow CVE-2024-11236 |
CWE-190 | High | Ubuntu Pro | 19.11.2024 |
SB2024111985 SB2024112137 SB2024112138 and 12 more |
||
| #VU91107 - Improper input validation CVE-2024-5458 |
CWE-20 | Medium | Ubuntu Pro | 05.06.2024 |
SB2024060501 SB2024060502 SB2024060503 and 18 more |
||
| #VU88484 - Improper Authentication CVE-2024-3096 |
CWE-287 | High | Ubuntu Pro | 11.04.2024 |
SB2024041173 SB2024041175 SB2024041176 and 25 more |
||
| #VU88483 - Security Features CVE-2024-2756 |
CWE-254 | Low | Ubuntu Pro | 11.04.2024 |
SB2024041173 SB2024041175 SB2024041176 and 24 more |
||
| #VU78978 - Memory corruption CVE-2023-3824 |
CWE-119 | Critical | Ubuntu Pro | 06.08.2023 |
SB2023080604 SB2023081704 SB20230821142 and 32 more |
||
| #VU78977 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-3823 |
CWE-611 | High | Ubuntu Pro | 06.08.2023 |
SB2023080604 SB2023081704 SB20230821142 and 31 more |
||
| #VU77112 - Use of Insufficiently Random Values CVE-2023-3247 |
CWE-330 | Medium | Ubuntu Pro | 09.06.2023 |
SB2023060919 SB2023061105 SB2023061516 and 24 more |
||
| #VU74185 - Memory corruption CVE-2022-4900 |
CWE-119 | Low | Ubuntu Pro | 30.03.2023 |
SB2023033010 SB2023033014 SB2023041468 and 4 more |
||
| #VU72167 - Out-of-bounds write CVE-2023-0568 |
CWE-787 | Medium | 7.2.24-0ubuntu0.18.04.17 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 27 more |
||
| #VU72166 - Use of Insufficiently Random Values CVE-2023-0567 |
CWE-330 | Medium | 7.2.24-0ubuntu0.18.04.17 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 23 more |
||
| #VU72165 - Improper input validation CVE-2023-0662 |
CWE-20 | Medium | 7.2.24-0ubuntu0.18.04.17 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 25 more |
||
| #VU70788 - Integer overflow CVE-2022-31631 |
CWE-190 | Medium | 7.2.24-0ubuntu0.18.04.16 | 07.01.2023 |
SB2023010702 SB2023010704 SB2023011201 and 21 more |
||
| #VU68887 - Integer overflow CVE-2022-37454 |
CWE-190 | High | 7.2.24-0ubuntu0.18.04.15 | 01.11.2022 |
SB2022110118 SB2022110119 SB2022110209 and 69 more |
||
| #VU68886 - Out-of-bounds read CVE-2022-31630 |
CWE-125 | Medium | 7.2.24-0ubuntu0.18.04.15 | 01.11.2022 |
SB2022110119 SB2022110336 SB2022110814 and 21 more |
||
| #VU67756 - Security Features CVE-2022-31629 |
CWE-254 | Low | 7.2.24-0ubuntu0.18.04.15 | 29.09.2022 |
SB2022092960 SB2022093041 SB2022101944 and 49 more |
||
| #VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-31628 |
CWE-835 | Medium | 7.2.24-0ubuntu0.18.04.15 | 29.09.2022 |
SB2022092960 SB2022093041 SB2022101944 and 26 more |
||
| #VU28318 - Resource exhaustion CVE-2019-11048 |
CWE-400 | Medium | 7.2.24-0ubuntu0.18.04.6 | 28.05.2020 |
SB2020052806 SB2020052807 SB2020062301 and 12 more |
Showing elements 1 - 20 out of 26