CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
phpphp
7.2.0 ≤
𝑥
< 7.2.30
phpphp
7.3.0 ≤
𝑥
< 7.3.17
phpphp
7.4.0 ≤
𝑥
< 7.4.5
tenabletenable.sc
𝑥
< 5.19.0
oraclecommunications_diameter_signaling_router
8.0.0.0 ≤
𝑥
≤ 8.4.0.5
debiandebian_linux
9.0
debiandebian_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
php7.4
bullseye
7.4.33-1+deb11u5
fixed
bullseye (security)
7.4.33-1+deb11u6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
php5
bionic
dne
eoan
dne
trusty
not-affected
xenial
dne
php7.0
bionic
dne
eoan
dne
trusty
dne
xenial
not-affected
php7.2
bionic
not-affected
eoan
dne
trusty
dne
xenial
dne
php7.3
bionic
dne
eoan
not-affected
trusty
dne
xenial
dne
php7.4
bionic
dne
eoan
dne
trusty
dne
xenial
dne
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
php72
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-bcmath
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-cli
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-common
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-dba
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-dbg
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-debuginfo
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-devel
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-embedded
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-enchant
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-fpm
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-gd
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-gmp
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-imap
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-intl
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-json
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-ldap
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-mbstring
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-mysqlnd
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-odbc
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-opcache
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-pdo
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-pdo-dblib
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-pgsql
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-process
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-pspell
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-recode
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-snmp
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-soap
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-tidy
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-xml
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php72-xmlrpc
Amazon Linux 1
0:7.2.30-1.22.amzn1
fixed
php73
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-bcmath
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-cli
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-common
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-dba
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-dbg
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-debuginfo
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-devel
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-embedded
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-enchant
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-fpm
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-gd
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-gmp
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-imap
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-intl
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-json
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-ldap
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-mbstring
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-mysqlnd
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-odbc
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-opcache
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-pdo
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-pdo-dblib
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-pgsql
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-process
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-pspell
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-recode
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-snmp
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-soap
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-tidy
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-xml
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed
php73-xmlrpc
Amazon Linux 1
0:7.3.17-1.25.amzn1
fixed