REDHAT-BUG-2170770
First published: Fri Feb 17 2023(Updated: )
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification. <a href="https://bugs.php.net/bug.php?id=81746">https://bugs.php.net/bug.php?id=81746</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHP | <8.0.28 | |
| PHP | <8.1.16 | |
| PHP | <8.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugs.php.net/bug.php?id=81746
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2170779
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2170780
- https://access.redhat.com/errata/RHSA-2023:5926
- https://access.redhat.com/errata/RHSA-2023:5927
- https://access.redhat.com/errata/RHSA-2024:0387
- https://access.redhat.com/errata/RHSA-2024:10952
- https://bugzilla.redhat.com/show_bug.cgi?id=2170770
Frequently Asked Questions
What is the severity of REDHAT-BUG-2170770?
The severity of REDHAT-BUG-2170770 is significant due to potential buffer overflow vulnerabilities.
How do I fix REDHAT-BUG-2170770?
To fix REDHAT-BUG-2170770, upgrade to PHP versions 8.0.28, 8.1.16, or 8.2.3 or later.
What versions of PHP are affected by REDHAT-BUG-2170770?
Affected PHP versions include 8.0.X before 8.0.28, 8.1.X before 8.1.16, and 8.2.X before 8.2.3.
What is the nature of the vulnerability in REDHAT-BUG-2170770?
The nature of the vulnerability in REDHAT-BUG-2170770 involves a core path resolution function allocating a buffer one byte too small.
Can REDHAT-BUG-2170770 lead to data corruption?
Yes, REDHAT-BUG-2170770 can potentially lead to data corruption by overwriting memory beyond the allocated buffer.
- agent/type
- agent/first-publish-date
- agent/event
- agent/severity
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-0568
- agent/last-modified-date
- agent/references
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/php
- canonical/php