In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php73 | Feb 8, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3Upgrade php7.0Upgrade php5 | Feb 19, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Php | — | Upgrade to PHP version 7.3.13 | Jan 29, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub