by Kastro
Paper/Archive/CVE-2020-7060

CVE-2020-7060

PHP Group PHP — global buffer-overflow in mbfl_filt_conv_big5_wchar

EPSS 9%CVSS 9.1
critical.is priorityof 100
46
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 95.2.952 × 2019.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

Affected

ProductAffectedFixed inSource
PHP7.2.x – < 7.2.277.2.27CNA
PHP7.3.x – < 7.3.147.3.14CNA
PHP7.4.x – < 7.4.27.4.2CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
php (CNA)6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

References

refseclists.org/bugtraq/2020/Feb/27advisorydebian.org/security/2020/dsa-4626advisoryusn.ubuntu.com/4279-1advisorydebian.org/security/2020/dsa-4628refseclists.org/bugtraq/2020/Feb/31reflists.debian.org/debian-lts-announce/2020/02/msg00030.htmladvisorylists.opensuse.org/opensuse-security-announce/2020-03/msg00023.htmladvisorysecurity.gentoo.org/glsa/202003-57reforacle.com/security-alerts/cpujul2020.htmlrefsecurity.netapp.com/advisory/ntap-20200221-0002refbugs.php.net/bug.php?id=79037refseclists.org/bugtraq/2021/Jan/3reforacle.com/security-alerts/cpuApr2021.htmlreftenable.com/security/tns-2021-14