Lucene search

CVE-2020-7064

🗓️ 01 Apr 2020 04:13:15Reported by phpType

cve🔗 web.nvd.nist.gov👁 612 Views🌐 5 Media mentions

PHP vulnerability CVE-2020-7064 allows reading uninitialized memory

Reporter	Title	Published	Views	Family All 100
RedhatCVE	CVE-2020-7064	3 Apr 202013:01	–	redhatcve
Debian CVE	CVE-2020-7064	1 Apr 202004:15	–	debiancve
Veracode	Information Disclosure	6 Aug 202021:35	–	veracode
Check Point Advisories	PHP exif_read_data Out-Of-Bounds Read (CVE-2020-7064)	16 Apr 202000:00	–	checkpoint_advisories
OSV	CVE-2020-7064	1 Apr 202004:15	–	osv
OSV	BIT-php-2020-7064	6 Mar 202411:07	–	osv
OSV	php5 - security update	26 Apr 202000:00	–	osv
OSV	php7.0 - security update	5 Jul 202000:00	–	osv
OSV	php7.3 - security update	6 Jul 202000:00	–	osv
OSV	Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update	13 Sep 202422:43	–	osv

Nvd

Node

php phpRange7.2.0–7.2.29

php phpRange7.3.0–7.3.16

php phpRange7.4.0–7.4.4

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

canonical ubuntu_linuxMatch12.04esm

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.10

canonical ubuntu_linuxMatch20.04lts

Node

opensuse leapMatch15.1

Node

tenable tenable.scRange<5.19.0

[
  {
    "product": "PHP",
    "vendor": "PHP Group",
    "versions": [
      {
        "lessThan": "7.3.16",
        "status": "affected",
        "version": "7.3.x",
        "versionType": "custom"
      },
      {
        "lessThan": "7.4.4",
        "status": "affected",
        "version": "7.4.x",
        "versionType": "custom"
      },
      {
        "lessThan": "7.2.29",
        "status": "affected",
        "version": "7.2.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2020/dsa-4719
security	www.security.netapp.com/advisory/ntap-20200403-0001/
tenable	www.tenable.com/security/tns-2021-14
oracle	www.oracle.com/security-alerts/cpujan2021.html
lists	www.lists.debian.org/debian-lts-announce/2020/04/msg00021.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html
bugs	www.bugs.php.net/bug.php
usn	www.usn.ubuntu.com/4330-2/
debian	www.debian.org/security/2020/dsa-4717
usn	www.usn.ubuntu.com/4330-1/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Apr 2020 04:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS25.8

CVSS36.5

EPSS0.004