Wind River Support Network

HomeDefectsLIN8-12135
Fixed

LIN8-12135 : Security Advisory - php - CVE-2020-7060

Created: Feb 11, 2020    Updated: Apr 22, 2022
Resolved Date: Apr 20, 2020
Found In Version: 8.0.0.1
Fix Version: 8.0.0.33
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

CREATE(Triage):(User=admin) CVE-2020-7060 (https://nvd.nist.gov/vuln/detail/CVE-2020-7060)

CVEs


Live chat
Online