CVE-2021-21708
EUVD-2021-888027.02.2022, 08:15
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| php | php | 7.4.0 ≤ 𝑥 < 7.4.28 |
| php | php | 8.0.0 ≤ 𝑥 < 8.0.16 |
| php | php | 8.1.0 ≤ 𝑥 < 8.1.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| php5 |
| ||||||||||||
| php7.0 |
| ||||||||||||
| php7.2 |
| ||||||||||||
| php7.4 |
| ||||||||||||
| php8.0 |
| ||||||||||||
| php8.1 |
|
Common Weakness Enumeration