OOB Read in urldecode()
In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7067US | high7.5 | — | ||
In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access location… | ||||
02
references
External citations — patches, advisories, analysis.
- https://bugs.php.net/bug.php?id=79465ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2020-7067WEB
- https://security.netapp.com/advisory/ntap-20200504-0001/ADVISORY
- https://www.debian.org/security/2020/dsa-4717ADVISORY
- https://www.debian.org/security/2020/dsa-4719ADVISORY
- https://www.oracle.com/security-alerts/cpuApr2021.htmlADVISORY
- https://www.oracle.com/security-alerts/cpuoct2020.htmlADVISORY
- https://www.tenable.com/security/tns-2021-14ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan