vulnerability

Oracle Solaris 11: CVE-2019-9021: Vulnerability in PHP

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Feb 22, 2019
Added
Nov 20, 2019
Modified
Feb 17, 2022

Description

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.

Solution(s)

oracle-solaris-11-4-upgrade-web-php-71-7-1-32-11-4-15-0-1-1-0oracle-solaris-11-4-upgrade-web-php-73-7-3-9-11-4-15-0-1-1-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.