Описание
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | php | Out of support scope | ||
| Red Hat Enterprise Linux 6 | php | Out of support scope | ||
| Red Hat Enterprise Linux 7 | php | Will not fix | ||
| Red Hat Software Collections | rh-php70-php | Will not fix | ||
| Red Hat Enterprise Linux 8 | php | Fixed | RHSA-2020:1624 | 28.04.2020 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-php71-php | Fixed | RHSA-2019:2519 | 19.08.2019 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-php72-php | Fixed | RHSA-2019:3299 | 01.11.2019 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS | rh-php71-php | Fixed | RHSA-2019:2519 | 19.08.2019 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS | rh-php71-php | Fixed | RHSA-2019:2519 | 19.08.2019 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS | rh-php72-php | Fixed | RHSA-2019:3299 | 01.11.2019 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.3 High
CVSS3
Связанные уязвимости
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x ...
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
Уязвимость функции xml_elem_parse_buf() интерпретатора языка программирования PHP, связанная с чтением за пределами границ буфера памяти, позволяющая нарушителю получить несанкционированный доступ к защищаемым данным
EPSS
7.3 High
CVSS3