ID CVE-2020-7060
Summary When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.
References
Vulnerable Configurations
  • cpe:2.3:a:php:php:7.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:alpha1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:alpha1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:alpha2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:alpha2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:alpha3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:alpha3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.0:rc6:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.0:rc6:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.1:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.1:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.2:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.2:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.4.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.4.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:alpha1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:alpha1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:alpha2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:alpha2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:alpha3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:alpha3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.0:rc6:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.0:rc6:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.1:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.2:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.3:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.4:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.4:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.5:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.5:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.6:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.6:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.7:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.7:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.8:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.8:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.8:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.9:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.9:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.9:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.10:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.10:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.10:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.10:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.11:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.11:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.11:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.11:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.11:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.12:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.12:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.12:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.12:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.12:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.12:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.13:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.13:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.13:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.13:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.14:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.14:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.14:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.14:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.14:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.14:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.15:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.15:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.16:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.16:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.17:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.17:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.18:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.18:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.19:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.19:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.20:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.20:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.21:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.21:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.22:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.22:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.23:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.23:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.24:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.24:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.25:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.25:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.26:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.26:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.2.27:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.2.27:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:alpha1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:alpha1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:alpha2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:alpha2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:alpha3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:alpha3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:alpha4:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:alpha4:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.0:rc6:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.0:rc6:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.1:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.1:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.2:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.2:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.3:-:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.3:-:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.8:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.8:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.9:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.9:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.10:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.10:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.11:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.12:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.12:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:7.3.13:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:7.3.13:*:*:*:*:*:*:*
  • cpe:2.3:a:tenable:tenable.sc:-:*:*:*:*:*:*:*
    cpe:2.3:a:tenable:tenable.sc:-:*:*:*:*:*:*:*
  • cpe:2.3:a:tenable:tenable.sc:5.13.0:*:*:*:*:*:*:*
    cpe:2.3:a:tenable:tenable.sc:5.13.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tenable:tenable.sc:5.14.0:*:*:*:*:*:*:*
    cpe:2.3:a:tenable:tenable.sc:5.14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tenable:tenable.sc:5.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:tenable:tenable.sc:5.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tenable:tenable.sc:5.16.0:*:*:*:*:*:*:*
    cpe:2.3:a:tenable:tenable.sc:5.16.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tenable:tenable.sc:5.17.0:*:*:*:*:*:*:*
    cpe:2.3:a:tenable:tenable.sc:5.17.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tenable:tenable.sc:5.18.0:*:*:*:*:*:*:*
    cpe:2.3:a:tenable:tenable.sc:5.18.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
CVSS
Base: 6.4 (as of 01-07-2022 - 12:33)
Impact:
Exploitability:
CWE CWE-125
CAPEC
  • Infiltration of Hardware Development Environment
    An attacker, leveraging the ability to manipulate components of primary support systems and tools within the development and production environments, inserts malicious software within the hardware and/or firmware development environment. The infiltration purpose is to alter developed hardware components in a system destined for deployment at the victim's organization, for the purpose of disruption or further compromise.
  • Overread Buffers
    An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:P
redhat via4
rpms
  • apcu-panel-0:5.1.17-1.module+el8.1.0+3189+a1bff096
  • libzip-0:1.5.2-1.module+el8.1.0+3189+a1bff096
  • libzip-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096
  • libzip-debugsource-0:1.5.2-1.module+el8.1.0+3189+a1bff096
  • libzip-devel-0:1.5.2-1.module+el8.1.0+3189+a1bff096
  • libzip-tools-0:1.5.2-1.module+el8.1.0+3189+a1bff096
  • libzip-tools-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096
  • php-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-bcmath-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-bcmath-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-cli-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-cli-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-common-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-common-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-dba-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-dba-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-dbg-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-dbg-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-debugsource-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-devel-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-embedded-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-embedded-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-enchant-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-enchant-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-fpm-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-fpm-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-gd-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-gd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-gmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-gmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-intl-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-intl-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-json-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-json-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-ldap-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-ldap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-mbstring-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-mbstring-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-mysqlnd-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-mysqlnd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-odbc-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-odbc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-opcache-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-opcache-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-pdo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-pdo-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-pear-1:1.10.9-1.module+el8.1.0+3189+a1bff096
  • php-pecl-apcu-0:5.1.17-1.module+el8.1.0+3189+a1bff096
  • php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.1.0+3189+a1bff096
  • php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.1.0+3189+a1bff096
  • php-pecl-apcu-devel-0:5.1.17-1.module+el8.1.0+3189+a1bff096
  • php-pecl-rrd-0:2.0.1-1.module+el8.2.0+4968+1d5097db
  • php-pecl-rrd-debuginfo-0:2.0.1-1.module+el8.2.0+4968+1d5097db
  • php-pecl-rrd-debugsource-0:2.0.1-1.module+el8.2.0+4968+1d5097db
  • php-pecl-xdebug-0:2.8.0-1.module+el8.2.0+4968+1d5097db
  • php-pecl-xdebug-debuginfo-0:2.8.0-1.module+el8.2.0+4968+1d5097db
  • php-pecl-xdebug-debugsource-0:2.8.0-1.module+el8.2.0+4968+1d5097db
  • php-pecl-zip-0:1.15.4-1.module+el8.1.0+3189+a1bff096
  • php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.1.0+3189+a1bff096
  • php-pecl-zip-debugsource-0:1.15.4-1.module+el8.1.0+3189+a1bff096
  • php-pgsql-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-pgsql-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-process-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-process-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-recode-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-recode-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-snmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-snmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-soap-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-soap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-xml-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-xml-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-xmlrpc-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • php-xmlrpc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef
  • rh-php73-php-0:7.3.20-1.el7
  • rh-php73-php-bcmath-0:7.3.20-1.el7
  • rh-php73-php-cli-0:7.3.20-1.el7
  • rh-php73-php-common-0:7.3.20-1.el7
  • rh-php73-php-dba-0:7.3.20-1.el7
  • rh-php73-php-dbg-0:7.3.20-1.el7
  • rh-php73-php-debuginfo-0:7.3.20-1.el7
  • rh-php73-php-devel-0:7.3.20-1.el7
  • rh-php73-php-embedded-0:7.3.20-1.el7
  • rh-php73-php-enchant-0:7.3.20-1.el7
  • rh-php73-php-fpm-0:7.3.20-1.el7
  • rh-php73-php-gd-0:7.3.20-1.el7
  • rh-php73-php-gmp-0:7.3.20-1.el7
  • rh-php73-php-intl-0:7.3.20-1.el7
  • rh-php73-php-json-0:7.3.20-1.el7
  • rh-php73-php-ldap-0:7.3.20-1.el7
  • rh-php73-php-mysqlnd-0:7.3.20-1.el7
  • rh-php73-php-odbc-0:7.3.20-1.el7
  • rh-php73-php-opcache-0:7.3.20-1.el7
  • rh-php73-php-pdo-0:7.3.20-1.el7
  • rh-php73-php-pgsql-0:7.3.20-1.el7
  • rh-php73-php-process-0:7.3.20-1.el7
  • rh-php73-php-pspell-0:7.3.20-1.el7
  • rh-php73-php-recode-0:7.3.20-1.el7
  • rh-php73-php-snmp-0:7.3.20-1.el7
  • rh-php73-php-soap-0:7.3.20-1.el7
  • rh-php73-php-xml-0:7.3.20-1.el7
  • rh-php73-php-xmlrpc-0:7.3.20-1.el7
  • rh-php73-php-zip-0:7.3.20-1.el7
refmap via4
bugtraq
  • 20200218 [SECURITY] [DSA 4626-1] php7.3 security update
  • 20200219 [SECURITY] [DSA 4628-1] php7.0 security update
  • 20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update
confirm https://security.netapp.com/advisory/ntap-20200221-0002/
debian
  • DSA-4626
  • DSA-4628
gentoo GLSA-202003-57
misc
mlist [debian-lts-announce] 20200228 [SECURITY] [DLA 2124-1] php5 security update
suse openSUSE-SU-2020:0341
ubuntu USN-4279-1
Last major update 01-07-2022 - 12:33
Published 10-02-2020 - 08:15
Last modified 01-07-2022 - 12:33
Back to Top