Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mx27-jhrp-2gfm

Опубликовано: 21 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

EPSS

Процентиль: 81%
0.0157
Низкий

7.5 High

CVSS3

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

redhat
больше 14 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

CVSS3: 7.5
nvd
больше 5 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

CVSS3: 7.5
debian
больше 5 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlText ...

CVSS3: 7.5
fstec
больше 5 лет назад

Уязвимость компонента XMLWriter интерпретатора языка программирования PHP, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 81%
0.0157
Низкий

7.5 High

CVSS3

Дефекты

CWE-772