CVE-2023-0568

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-0568
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-0568.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-0568
Aliases
Downstream
Related
Published
2023-02-16T06:34:04.101Z
Modified
2026-05-15T04:06:10.157948352Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Array overrun in common path resolve code
Details

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.

Database specific 
{
    "cwe_ids": [
        "CWE-131"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0568.json",
    "cna_assigner": "php"
}
References

Affected packages