CVE-2023-3824 — Buffer overflow and overread in phar_dir_read()

Affected: PHP Group PHP

In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

USN-6305-1 — php8.1 vulnerabilities

Affected: Ubuntu:22.04:LTS: php8.1

It was discovered that PHP incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information. (CVE-2023-3823)

It was discovered that PHP incorrectly handled certain PHAR files. An attacker could possibly use this issue to cause a crash, expose sensitive information or execute arbitrary code. (CVE-2023-3824)

Most recent entries from all

CVE-2023-3824 — Buffer overflow and overread in phar_dir_read()

USN-6305-1 — php8.1 vulnerabilities