CVE-2022-4900
Potential buffer overflow in php_cli_server_startup_workers
Résumé
Potential buffer overflow in php_cli_server_startup_workers
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
Paquets affectés
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"7.4.0"},{"fixed":"8.0.22"}]}]
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"7.4.0"},{"fixed":"8.0.22"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"7.4.0"},{"fixed":"8.0.22"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-4900 php7.4 Corrigé dans: 7.4.33-1+deb11u6
Références
- advisory access.redhat.com
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web lists.debian.org
- web github.com
- web github.com
- web access.redhat.com
- web packages.fedoraproject.org