Known vulnerabilities in php-sodium - page 3

Vendor: openEuler
Software: php-sodium
Software CPE: cpe:2.3:o:openeuler:php-sodium:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 48
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php-sodium php-sodium is affected by 48 known vulnerabilities: 2 critical, 8 high, 32 medium, 6 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78978 - Memory corruption
CVE-2023-3824
CWE-119 Critical
Available
Exploited
7.2.34-3, 8.0.30-1 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823
CWE-611 High
No
No
7.2.34-3, 8.0.30-1 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247
CWE-330 Medium
No
No
7.2.34-3, 8.0.30-1 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU72167 - Out-of-bounds write
CVE-2023-0568
CWE-787 Medium
No
No
7.2.34-3, 8.0.30-1 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72165 - Improper input validation
CVE-2023-0662
CWE-20 Medium
No
No
7.2.34-3, 8.0.30-1 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU68887 - Integer overflow
CVE-2022-37454
CWE-190 High
Available
No
7.2.34-2, 8.0.28-1 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU67756 - Security Features
CVE-2022-31629
CWE-254 Low
Available
No
7.2.34-2, 8.0.28-1, 8.0.30-5 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-31628
CWE-835 Medium
No
No
7.2.34-2, 8.0.28-1 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 26 more


Showing elements 41 - 60 out of 48