CVE-2023-0568: Array overrun in common path resolve code
Fixed bug (1-byte array overrun in common path resolve code). (CVE-2023-0568)
Other sources
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-0568?
CVE-2023-0568 is a vulnerability in PHP that caused a 1-byte array overrun in common path resolve code.
How severe is CVE-2023-0568?
CVE-2023-0568 has a severity rating of <severity rating>.
How can I fix CVE-2023-0568?
To fix CVE-2023-0568, you need to update your PHP installation to version 8.2.3 or later.
Is there a reference to learn more about CVE-2023-0568?
Yes, you can find more information about CVE-2023-0568 in the PHP ChangeLog for version 8.2.3.