#VU26979 Out-of-bounds read in PHP - CVE-2020-7067

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU26979

#VU26979 Out-of-bounds read in PHP - CVE-2020-7067

Published: April 16, 2020 / Updated: April 21, 2020


Vulnerability identifier: #VU26979
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2020-7067
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
PHP
Software vendor:
PHP Group

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when processing untrusted input passed to urldecode() PHP function. A remote attacker can send specially crafted data to the application that uses the affected function and gain access to sensitive information on the system


Remediation

Install updates from vendor's website.

External links