Lucene search
BigshaqH1:852103HistoryApr 17, 2020 - 9:39 a.m.
Internet Bug Bounty: Out-of-Bound Read in urldecode() [CVE-2020-7067]
2020-04-1709:39:51
bigshaq
hackerone.com
38
EPSS
0.017
Percentile
88.1%
Hi,
Please see: https://bugs.php.net/bug.php?id=79465&edit=2
CVE is assigned (CVE-2020-7067)
Fixed in 7.4.5 Release: https://www.php.net/ChangeLog-7.php#7.4.5
Impact
A remote attacker might leak values from the memory by crafting a malicious url-encoded string into PHP’s urldecode()
Related
nessus
nessus
PHP 7.4.x < 7.4.5 urldecode OOB Read
2020-04-24 00:00:00
PHP 7.3.x < 7.3.17 Multiple Vulnerabilities
2020-06-26 00:00:00
PHP 7.2.x < 7.2.30 Multiple Vulnerabilities
2020-04-23 00:00:00
attackerkb
attackerkb
CVE-2020-7067
2020-04-14 00:00:00
openvas
openvas
PHP < 7.2.30, 7.3 < 7.3.17, 7.4 < 7.4.5 DoS Vulnerability (Apr 2020) - Linux
2020-04-17 00:00:00
Mageia: Security Advisory (MGASA-2020-0178)
2022-01-28 00:00:00
nvd
nvd
CVE-2020-7067
2020-04-27 21:15:14
altlinux
altlinux
Security fix for the ALT Linux 9 package php7 version 7.3.17-alt1
2020-04-24 00:00:00
Security fix for the ALT Linux 10 package php8.0 version 7.3.17-alt1
2020-04-21 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 7.3.17-alt1
2020-04-21 00:00:00
osv
osv
BIT-php-2020-7067
2024-03-06 11:06:30
CVE-2020-7067
2020-04-27 21:15:14
php5 - security update
2020-04-26 00:00:00
ubuntucve
ubuntucve
CVE-2020-7067
2020-04-27 00:00:00
cvelist
cvelist
CVE-2020-7067 OOB Read in urldecode()
2020-04-27 20:38:39
ibm
ibm
debiancve
debiancve
CVE-2020-7067
2020-04-27 21:15:14
mageia
mageia
Updated php packages fix security vulnerability
2020-04-20 17:02:32
prion
prion
Code injection
2020-04-27 21:15:00
alpinelinux
alpinelinux
CVE-2020-7067
2020-04-27 21:15:14
veracode
veracode
Out-of-bound Read
2020-08-06 21:35:42
redhatcve
redhatcve
CVE-2020-7067
2020-04-24 13:04:21
cve
cve
CVE-2020-7067
2020-04-27 21:15:14
amazon
amazon
Medium: php72
2020-05-08 20:28:00
Medium: php73
2020-05-08 20:29:00
debian
debian
[SECURITY] [DLA 2188-1] php5 security update
2020-04-26 14:08:10
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00