FrankenPHP before 1.13.4 Double Free in Worker Mode via Non-Form POST
Summary
FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees SG(request_info).content_type_dup twice when a worker script ends its loop after a non-form POST request. Unauthenticated attackers can send repeated JSON POST requests until the worker loop ends, aborting the wh...
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| phpfrankenphp |
< 1.13.4→ 1.13.4 |
1.13.4 |
Original description The description as published by the source.
FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees SG(request_info).content_type_dup twice when a worker script ends its loop after a non-form POST request. Unauthenticated attackers can send repeated JSON POST requests until the worker loop ends, aborting the whole process when USE_ZEND_ALLOC=0 is set.
Source: CVE.org (CVE Program・cvelistV5) NVD