Lucene search

K
cvelistPhpCVELIST:CVE-2020-7061
HistoryFeb 17, 2020 - 12:00 a.m.

CVE-2020-7061 heap-buffer-overflow in phar_extract_file

2020-02-1700:00:00
CWE-125
php
raw.githubusercontent.com
3

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

71.9%

In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

71.9%