OSV-2021-736

    Dashboard / Vulnerabilities / OSV-2021-736

    OSV-2021-736

    Published: 8 May 2021Last Modified: 24 Feb 2023

    Summary: Stack-use-after-return in zend_fiber_suspend_context

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013 ``` Crash type: Stack-use-after-return READ 4 Crash state: zend_fiber_suspend_context zend_fiber_suspend zim_Fiber_suspend ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013

    Affected packages

    Package

    Name: php

    Purl: pkg:generic/php

    Affected ranges

    Type: GIT

    Events:

    Introduced- b52106f6b984562113d8d871bed975921c20bf97
    Fixed -ed33262dbbc9a39c43c5de75be6aa89c1a3a71a8

    Affected versions

    NEWS

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-736 | CVE-DB