In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade--php73amazon-linux-upgrade-php72amazon-linux-upgrade-php73 | Feb 8, 2020 | Dec 23, 2019 |
| Debian | debian-upgrade-php5debian-upgrade-php7-0debian-upgrade-php7-3 | Feb 19, 2020 | Dec 23, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-web-php-73-7-3-14-11-4-19-0-1-2-0 | Jan 19, 2021 | Dec 23, 2019 | |
| Php | php-upgrade-7_3_13 | Jan 29, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub