vulnerability

Alpine Linux: CVE-2023-0568: Allocation of Resources Without Limits or Throttling

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Feb 16, 2023
Added
Aug 22, 2024
Modified
Oct 2, 2024

Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification. 

Solution(s)

alpine-linux-upgrade-php7alpine-linux-upgrade-php8alpine-linux-upgrade-php81alpine-linux-upgrade-php82
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.