CVE-2022-4900
Potential buffer overflow in php_cli_server_startup_workers
Summary
Potential buffer overflow in php_cli_server_startup_workers
Original description
The description as published by the source.
A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
Affected packages
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"7.4.0"},{"fixed":"8.0.22"}]}]
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"7.4.0"},{"fixed":"8.0.22"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"7.4.0"},{"fixed":"8.0.22"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-4900 php7.4 Fixed in: 7.4.33-1+deb11u6
References
- advisory access.redhat.com
- advisory security.netapp.com
- report bugzilla.redhat.com
- web nvd.nist.gov
- web lists.debian.org
- web github.com
- web github.com