Wind River Support Network

HomeDefectsLIN1021-2862

Fixed

LIN1021-2862 : Security Advisory - php - CVE-2021-21708

Created: Feb 17, 2022 Updated: Jul 24, 2022

Resolved Date: Jul 24, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.14

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

UAF due to php_filter_float() failing for ints

https://www.php.net/ChangeLog-7.php#7.4.28

CREATE(Triage):(User=admin) CVE-2021-21708 (https://nvd.nist.gov/vuln/detail/CVE-2021-21708)

CVEs

CVE-2021-21708