Описание
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-infra-legacy/trusty | not-affected | 5.5.9+dfsg-1ubuntu4.19 |
precise | released | 5.3.10-1ubuntu3.24 |
trusty | released | 5.5.9+dfsg-1ubuntu4.19 |
trusty/esm | not-affected | 5.5.9+dfsg-1ubuntu4.19 |
upstream | needs-triage | |
vivid/stable-phone-overlay | DNE | |
vivid/ubuntu-core | DNE | |
wily | ignored | end of life |
xenial | DNE |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | released | 7.0.8-3ubuntu2 |
esm-infra-legacy/trusty | DNE | |
esm-infra/xenial | not-affected | 7.0.8-0ubuntu0.16.04.2 |
precise | DNE | |
trusty | DNE | |
trusty/esm | DNE | |
upstream | released | 7.0.9 |
vivid/stable-phone-overlay | DNE | |
vivid/ubuntu-core | DNE | |
wily | DNE |
Показывать по
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x befor ...
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
Уязвимость функции bzread (ext/bz2/bz2.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3