Lucene search
GrigoritchyH1:950299HistoryAug 03, 2020 - 3:54 p.m.
Internet Bug Bounty: Use after free vulnerability in phar_parse_zipfile
2020-08-0315:54:17
grigoritchy
hackerone.com
39
0.001 Low
EPSS
Percentile
25.1%
Malformed phar file with cache configuration leads freed memory as hash key when it inserts into the hash table.
More detail information and original report is here: https://bugs.php.net/bug.php?id=79797 and it was assigned CVE-2020-7068.
Impact
Through this vulnerability that inserts freed memory into the hash table that manages alias file names, an attacker may gain memory information.
Related
altlinux
altlinux
Security fix for the ALT Linux 8 package php7 version 7.2.33-alt1
2020-08-12 00:00:00
Security fix for the ALT Linux 9 package php7 version 7.3.21-alt1
2020-08-11 00:00:00
openvas
openvas
openSUSE: Security Advisory for php7 (openSUSE-SU-2020:1354-1)
2020-09-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2403-1)
2021-06-09 00:00:00
nvd
nvd
CVE-2020-7068
2020-09-09 18:15:23
nessus
nessus
Fedora 32 : php (2020-96124cc236)
2020-08-19 00:00:00
PHP 7.4.x < 7.4.9 Use-After-Free Vulnerability
2020-08-13 00:00:00
SUSE SLES12 Security Update : php5 (SUSE-SU-2020:2477-1)
2020-09-04 00:00:00
cvelist
cvelist
CVE-2020-7068 Use of freed hash key in the phar_parse_zipfile function
2020-08-03 00:00:00
osv
osv
BIT-php-2020-7068
2024-03-06 11:06:18
CVE-2020-7068
2020-09-09 18:15:23
php7.0 - security update
2020-08-26 00:00:00
alpinelinux
alpinelinux
CVE-2020-7068
2020-09-09 18:15:23
ibm
ibm
suse
suse
Security update for php7 (moderate)
2020-09-07 00:00:00
Security update for php7 (moderate)
2020-09-07 00:00:00
gentoo
gentoo
PHP: Denial of service
2020-09-13 00:00:00
debian
debian
[SECURITY] [DLA 2345-1] php7.0 security update
2020-08-26 10:48:56
[SECURITY] [DSA 4856-1] php7.3 security update
2021-02-17 22:08:33
freebsd
freebsd
php72 -- use of freed hash key
2020-07-06 00:00:00
redhatcve
redhatcve
CVE-2020-7068
2020-08-11 17:43:43
prion
prion
Information disclosure
2020-09-09 18:15:00
fedora
fedora
[SECURITY] Fedora 32 Update: php-7.4.9-1.fc32
2020-08-19 00:52:00
[SECURITY] Fedora 31 Update: php-7.3.21-1.fc31
2020-08-19 01:01:59
cve
cve
CVE-2020-7068
2020-09-09 18:15:23
ubuntucve
ubuntucve
CVE-2020-7068
2020-09-09 00:00:00
veracode
veracode
Information Disclosure
2020-09-07 02:54:20
amazon
amazon
Low: php72, php73
2020-08-26 23:09:00
debiancve
debiancve
CVE-2020-7068
2020-09-09 18:15:23
ubuntu
ubuntu
PHP vulnerabilities
2021-07-13 00:00:00
PHP vulnerabilities
2021-07-07 00:00:00
redhat
redhat
rocky
rocky
php:7.4 security, bug fix, and enhancement update
2021-11-09 08:42:20
oraclelinux
oraclelinux
php:7.4 security, bug fix, and enhancement update
2021-11-16 00:00:00
almalinux
almalinux
Moderate: php:7.4 security, bug fix, and enhancement update
2021-11-09 08:42:20