In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.
References
Link | Resource |
---|---|
https://bugs.php.net/bug.php?id=79171 | Exploit Vendor Advisory |
https://security.gentoo.org/glsa/202003-57 | Third Party Advisory |
https://www.tenable.com/security/tns-2021-14 | Patch Third Party Advisory |
Configurations
History
16 May 2022, 19:42
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* | |
References |
|
|
References | (GENTOO) https://security.gentoo.org/glsa/202003-57 - Third Party Advisory |
Information
Published : 2020-02-27 21:15
Updated : 2024-02-04 20:39
NVD link : CVE-2020-7061
Mitre link : CVE-2020-7061
CVE.ORG link : CVE-2020-7061
JSON object : View
Products Affected
tenable
- tenable.sc
php
- php
microsoft
- windows
CWE
CWE-125
Out-of-bounds Read