In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 27, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | May 15, 2020 | Apr 27, 2020 |
| Debian | — | Upgrade php7.4 | Apr 28, 2020 | Apr 28, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-commonUpgrade php-pgsqlUpgrade php-ldapUpgrade php-odbcUpgrade php-mysqlUpgrade php-soapUpgrade php-pdoUpgrade php-cliUpgrade php-recodeUpgrade php-gdUpgrade php-processUpgrade phpUpgrade php-xmlUpgrade php-xmlrpc | Jun 17, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlrpcUpgrade php-gdUpgrade php-xmlUpgrade php-recodeUpgrade php-processUpgrade php-pdoUpgrade php-mysqlUpgrade php-cliUpgrade phpUpgrade php-odbcUpgrade php-pgsqlUpgrade php-soapUpgrade php-ldapUpgrade php-common | Sep 28, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-odbcUpgrade php-soapUpgrade phpUpgrade php-cliUpgrade php-ldapUpgrade php-gdUpgrade php-xmlrpcUpgrade php-processUpgrade php-fpmUpgrade php-xmlUpgrade php-pdoUpgrade php-common | Jul 31, 2020 | Apr 27, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.5-11.4.22.0.1.69.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.17-11.4.22.0.1.69.2 on Solaris 11.4 | Jan 19, 2021 | Apr 27, 2020 |
| Php | — | Upgrade to PHP version 7.4.5Upgrade to PHP version 7.3.17Upgrade to PHP version 7.2.30 | May 26, 2020 | Apr 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub