CVE-2020-7065

Опубликовано: 01 апр. 2020

Источник: nvd

CVSS3: 7.4

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.

Ссылки

https://bugs.php.net/bug.php?id=79371
Exploit
Issue Tracking
Patch
Vendor Advisory
https://security.netapp.com/advisory/ntap-20200403-0001/
Third Party Advisory
https://usn.ubuntu.com/4330-1/
Third Party Advisory
https://usn.ubuntu.com/4330-2/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4719
Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html
Patch
Third Party Advisory
https://www.php.net/ChangeLog-7.php#7.4.4
Release Notes
Vendor Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory
https://bugs.php.net/bug.php?id=79371
Exploit
Issue Tracking
Patch
Vendor Advisory
https://security.netapp.com/advisory/ntap-20200403-0001/
Third Party Advisory
https://usn.ubuntu.com/4330-1/
Third Party Advisory
https://usn.ubuntu.com/4330-2/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4719
Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html
Patch
Third Party Advisory
https://www.php.net/ChangeLog-7.php#7.4.4
Release Notes
Vendor Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 7.3.0 (включая) до 7.3.16 (исключая)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 7.4.0 (включая) до 7.4.4 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Конфигурация 4

cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*

Версия до 5.19.0 (исключая)

EPSS

Процентиль: 92%

0.0878

Низкий

7.4 High

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-121

CWE-787

Связанные уязвимости

CVE-2020-7065

CVSS3: 7.4

ubuntu

около 5 лет назад

CVE-2020-7065

CVSS3: 8.8

redhat

около 5 лет назад

CVE-2020-7065

CVSS3: 7.4

debian

около 5 лет назад

In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using ...

GHSA-hpqg-gp78-43q4

github

около 3 лет назад

In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.

BDU:2020-01677

CVSS3: 8.8

fstec

больше 5 лет назад

Уязвимость функции mb_strtolower () при использовании кодировки UTF-32LE интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 92%

0.0878

Низкий

7.4 High

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-121

CWE-787