CVE-2020-7068
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-7068
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-7068.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-7068
- Aliases
- Related
- Published
- 2020-09-09T18:15:23Z
- Modified
- 2025-01-15T08:56:38.759190Z
- Downstream
- Severity
-
- 3.6 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L CVSS Calculator
- Summary
- [none]
- Details
-
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
- References
Affected packages
Debian:11 / php7.4
Package
- Name
- php7.4
- Purl
- pkg:deb/debian/php7.4?arch=source