OSV-2020-2230

    Dashboard / Vulnerabilities / OSV-2020-2230

    OSV-2020-2230

    Published: 4 Dec 2020Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in _zend_is_inconsistent

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28129 ``` Crash type: Heap-buffer-overflow READ 4 Crash state: _zend_is_inconsistent zend_hash_find zend_hash_find_ptr ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28129

    Affected packages

    Package

    Name: php

    Purl: pkg:generic/php

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8b37c1e993f17345312a76a239b77ae137d3f8e8
    Fixed -f06afc434aec631f18f8da8ffca9a6f0559e1acf

    Affected versions

    php-8.0.0
    php-8.0.0RC2
    php-8.0.0RC3
    php-8.0.0RC4
    php-8.0.0RC5
    php-8.0.0beta4
    php-8.0.0rc1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2020-2230 | CVE-DB