CVE-2020-7061
EUVD-2020-2819527.02.2020, 21:15
In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| php | php | 7.2.0 ≤ 𝑥 ≤ 7.2.27 |
| php | php | 7.3.0 ≤ 𝑥 ≤ 7.3.14 |
| php | php | 7.4.0 ≤ 𝑥 ≤ 7.4.2 |
| tenable | tenable.sc | 𝑥 < 5.19.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration