Lucene search
Veracode Vulnerability DatabaseVERACODE:26204HistoryAug 06, 2020 - 9:35 p.m.
Out-of-bound Read
2020-08-0621:35:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
php
vulnerability
out-of-bound
urldecode
ebcdic
memory
EPSS
0.017
Percentile
88.1%
PHP is vulnerable to out-of-bound read. It is possible when compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.
Related
nessus
nessus
PHP 7.4.x < 7.4.5 urldecode OOB Read
2020-04-24 00:00:00
PHP 7.3.x < 7.3.17 Multiple Vulnerabilities
2020-06-26 00:00:00
PHP 7.2.x < 7.2.30 Multiple Vulnerabilities
2020-04-23 00:00:00
attackerkb
attackerkb
CVE-2020-7067
2020-04-14 00:00:00
openvas
openvas
PHP < 7.2.30, 7.3 < 7.3.17, 7.4 < 7.4.5 DoS Vulnerability (Apr 2020) - Linux
2020-04-17 00:00:00
Mageia: Security Advisory (MGASA-2020-0178)
2022-01-28 00:00:00
nvd
nvd
CVE-2020-7067
2020-04-27 21:15:14
altlinux
altlinux
Security fix for the ALT Linux 9 package php7 version 7.3.17-alt1
2020-04-24 00:00:00
Security fix for the ALT Linux 10 package php8.0 version 7.3.17-alt1
2020-04-21 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 7.3.17-alt1
2020-04-21 00:00:00
osv
osv
BIT-php-2020-7067
2024-03-06 11:06:30
CVE-2020-7067
2020-04-27 21:15:14
php5 - security update
2020-04-26 00:00:00
ubuntucve
ubuntucve
CVE-2020-7067
2020-04-27 00:00:00
cvelist
cvelist
CVE-2020-7067 OOB Read in urldecode()
2020-04-27 20:38:39
ibm
ibm
debiancve
debiancve
CVE-2020-7067
2020-04-27 21:15:14
mageia
mageia
Updated php packages fix security vulnerability
2020-04-20 17:02:32
prion
prion
Code injection
2020-04-27 21:15:00
hackerone
hackerone
Internet Bug Bounty: Out-of-Bound Read in urldecode() [CVE-2020-7067]
2020-04-17 09:39:51
alpinelinux
alpinelinux
CVE-2020-7067
2020-04-27 21:15:14
redhatcve
redhatcve
CVE-2020-7067
2020-04-24 13:04:21
cve
cve
CVE-2020-7067
2020-04-27 21:15:14
amazon
amazon
Medium: php72
2020-05-08 20:28:00
Medium: php73
2020-05-08 20:29:00
debian
debian
[SECURITY] [DLA 2188-1] php5 security update
2020-04-26 14:08:10
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00