by Kastro
Paper/Archive/CVE-2020-7059

CVE-2020-7059

PHP Group PHP — OOB read in php_strip_tags_ex

EPSS 7%CVSS 9.1
critical.is priorityof 100
46
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 94.4.944 × 2018.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

Affected

ProductAffectedFixed inSource
PHP7.2.x – < 7.2.277.2.27CNA
PHP7.3.x – < 7.3.147.3.14CNA
PHP7.4.x – < 7.4.27.4.2CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
php (CNA)6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

References

refseclists.org/bugtraq/2020/Feb/27advisorydebian.org/security/2020/dsa-4626advisoryusn.ubuntu.com/4279-1advisorydebian.org/security/2020/dsa-4628refseclists.org/bugtraq/2020/Feb/31reflists.debian.org/debian-lts-announce/2020/02/msg00030.htmladvisorylists.opensuse.org/opensuse-security-announce/2020-03/msg00023.htmladvisorysecurity.gentoo.org/glsa/202003-57reforacle.com/security-alerts/cpujul2020.htmlrefbugs.php.net/bug.php?id=79099refsecurity.netapp.com/advisory/ntap-20200221-0002refseclists.org/bugtraq/2021/Jan/3reforacle.com/security-alerts/cpuApr2021.htmlreftenable.com/security/tns-2021-14