Fixed
Created: Sep 9, 2020
Updated: Apr 22, 2022
Resolved Date: Sep 21, 2020
Found In Version: 10.19.45.1
Fix Version: 10.19.45.12
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace
In PHP versions 7.2.x below 7.3.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
CREATE(Triage):(User=admin) CVE-2020-7068 (https://nvd.nist.gov/vuln/detail/CVE-2020-7068)
