Buffer overflow and overread in phar_dir_read()

In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* bef ...

Уязвимость функции phar_dir_read() интерпретатора PHP, позволяющая нарушителю выполнить произвольный код

Security update for php7

Security update for php7

Security update for php7

Security update for php7

Множественные уязвимости php

Множественные уязвимости php

Important: php security update

ELSA-2024-0387: php:8.1 security update (MODERATE)

ELSA-2023-5927: php:8.0 security update (IMPORTANT)

ELSA-2023-5926: php security update (IMPORTANT)

ELSA-2024-10952: php:7.4 security update (MODERATE)