REDHAT-BUG-2170770: Medium severity php vulnerability
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.
https://bugs.php.net/bug.php?id=81746
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2170770?
The severity of REDHAT-BUG-2170770 is significant due to potential buffer overflow vulnerabilities.
How do I fix REDHAT-BUG-2170770?
To fix REDHAT-BUG-2170770, upgrade to PHP versions 8.0.28, 8.1.16, or 8.2.3 or later.
What versions of PHP are affected by REDHAT-BUG-2170770?
Affected PHP versions include 8.0.X before 8.0.28, 8.1.X before 8.1.16, and 8.2.X before 8.2.3.
What is the nature of the vulnerability in REDHAT-BUG-2170770?
The nature of the vulnerability in REDHAT-BUG-2170770 involves a core path resolution function allocating a buffer one byte too small.
Can REDHAT-BUG-2170770 lead to data corruption?
Yes, REDHAT-BUG-2170770 can potentially lead to data corruption by overwriting memory beyond the allocated buffer.