CVE-2023-0568

2023-02-1607:15:10

CWE-131

CWE-770

[email protected]

web.nvd.nist.gov

260

php

cve-2023-0568

security vulnerability

path resolution

buffer allocation

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.

Affected configurations

NVD

Node

phpphpRange8.0.0–8.0.28

phpphpRange8.1.0–8.1.16

phpphpRange8.2.0–8.2.3

CPENameOperatorVersion
php:phpphplt8.0.28
php:phpphplt8.1.16
php:phpphplt8.2.3

CPE	Name	Operator	Version
php:php	php	lt	8.0.28
php:php	php	lt	8.1.16
php:php	php	lt	8.2.3

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "PHP",
    "repo": "https://github.com/php/php-src",
    "vendor": "PHP Group",
    "versions": [
      {
        "lessThan": "8.0.28",
        "status": "affected",
        "version": "8.0.x",
        "versionType": "semver"
      },
      {
        "lessThan": "8.1.16",
        "status": "affected",
        "version": "8.1.x",
        "versionType": "semver"
      },
      {
        "lessThan": "8.2.3",
        "status": "affected",
        "version": "8.2.x",
        "versionType": "semver"
      }
    ]
  }
]