Lucene search
Veracode Vulnerability DatabaseVERACODE:39322HistoryFeb 17, 2023 - 10:23 a.m.
Incorrect Calculation Of Buffer Size
2023-02-1710:23:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
50
php
vulnerability
buffer size
calculation
unauthorized access
EPSS
0.002
Percentile
61.0%
PHP is vulnerable to Incorrect Calculation of Buffer Size. The vulnerability exists because the core path resolution function allocates a buffer one byte too small when resolving paths with lengths close to the system MAXPATHLEN setting, leading to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.
Related
nessus
nessus
F5 Networks BIG-IP : PHP vulnerability (K000134747)
2023-06-23 00:00:00
CBL Mariner 2.0 Security Update: php (CVE-2023-0568)
2023-03-20 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : php8 (SUSE-SU-2023:0527-1)
2023-02-27 00:00:00
osv
osv
CVE-2023-0568
2023-02-16 07:15:10
BIT-php-2023-0568
2024-03-06 11:02:02
php8-8.1.16-1.1 on GA media
2024-06-15 00:00:00
prion
prion
Design/Logic Flaw
2023-02-16 07:15:00
alpinelinux
alpinelinux
CVE-2023-0568
2023-02-16 07:15:10
debiancve
debiancve
CVE-2023-0568
2023-02-16 07:15:10
f5
f5
K000134747 : PHP vulnerability CVE-2023-0568
2023-05-23 00:00:00
redhatcve
redhatcve
CVE-2023-0568
2023-02-17 12:00:27
nvd
nvd
CVE-2023-0568
2023-02-16 07:15:10
ubuntucve
ubuntucve
CVE-2023-0568
2023-02-16 00:00:00
cvelist
cvelist
CVE-2023-0568 Array overrun in common path resolve code
2023-02-16 06:34:04
cbl_mariner
cbl_mariner
CVE-2023-0568 affecting package php for versions less than 8.1.16-1
2023-03-09 00:25:04
cve
cve
CVE-2023-0568
2023-02-16 07:15:10
redos
redos
ROS-20230418-02
2023-04-18 00:00:00
openvas
openvas
PHP < 8.0.28, 8.1.x < 8.1.16, 8.2.x < 8.2.3 Security Update - Linux
2023-02-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0514-1)
2023-03-28 00:00:00
Fedora: Security Advisory for php (FEDORA-2023-452714dbc6)
2023-02-25 00:00:00
slackware
slackware
[slackware-security] php
2023-02-15 03:06:12
fedora
fedora
[SECURITY] Fedora 37 Update: php-8.1.16-1.fc37
2023-02-24 04:47:32
[SECURITY] Fedora 36 Update: php-8.1.16-1.fc36
2023-02-24 03:47:37
mageia
mageia
Updated php packages fix security vulnerability
2023-02-27 23:27:16
cloudlinux
cloudlinux
php: Fix of 3 CVEs
2023-03-09 21:01:01
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.2 version 8.2.3-alt1
2023-02-21 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 8.1.16-alt1
2023-02-17 00:00:00
Security fix for the ALT Linux 10 package php8.0 version 8.0.28-alt1
2023-02-21 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2023-02-28 00:00:00
PHP vulnerabilities
2023-03-02 00:00:00
debian
debian
[SECURITY] [DLA 3345-1] php7.3 security update
2023-02-26 22:00:18
[SECURITY] [DSA 5363-1] php7.4 security update
2023-02-24 19:21:10
rocky
rocky
php:8.0 security update
2023-10-24 18:35:47
php:8.1 security update
2024-02-12 20:17:50
php security update
2023-10-24 18:36:55
almalinux
almalinux
Moderate: php:8.1 security update
2024-01-24 00:00:00
Important: php:8.0 security update
2023-10-19 00:00:00
Important: php security update
2023-10-19 00:00:00
redhat
redhat
(RHSA-2023:5926) Important: php security update
2023-10-19 12:43:29
(RHSA-2024:0387) Moderate: php:8.1 security update
2024-01-24 09:41:37
(RHSA-2023:5927) Important: php:8.0 security update
2023-10-19 12:45:04
oraclelinux
oraclelinux
php:8.0 security update
2023-10-23 00:00:00
php security update
2023-10-22 00:00:00
php:8.1 security update
2024-01-25 00:00:00
gentoo
gentoo
PHP: Multiple Vulnerabilities
2024-08-12 00:00:00
hp
hp
HP Device Manager Security Updates
2023-04-13 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00