Lucene search
HistoryNov 02, 2023 - 4:15 p.m.
CVE-2022-4900
php
vulnerability
heap buffer overflow
environment variable
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.7%
A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
Affected configurations
Node
phpphpMatch-
redhatsoftware_collectionsMatch-
Node
phpphpMatch8.1.0-
redhatlinuxMatch9.0
Node
phpphpMatch8.0.0-
redhatlinuxMatch8.0
Node
phpphpMatch7.4.0-
redhatlinuxMatch8.0
Node
phpphpMatch-
redhatlinuxMatch6.0
Node
phpphpMatch-
redhatlinuxMatch7.0
Node
phpphpMatch-
redhatlinuxMatch9.0
Related
nessus
nessus
openSUSE 15 Security Update : php7 (SUSE-SU-2023:1583-1)
2023-03-28 00:00:00
SUSE SLES12 Security Update : php7 (SUSE-SU-2023:1847-1)
2023-04-15 00:00:00
openvas
openvas
PHP < 8.0.22, 8.1.x < 8.1.9 Security Update - Windows
2023-03-21 00:00:00
PHP < 8.0.22, 8.1.x < 8.1.9 Security Update - Linux
2023-03-21 00:00:00
Ubuntu: Security Advisory (USN-6757-2)
2024-05-03 00:00:00
redhatcve
redhatcve
CVE-2022-4900
2023-03-20 11:13:20
prion
prion
Heap overflow
2023-11-02 16:15:00
cve
cve
CVE-2022-4900
2023-11-02 16:15:08
ubuntucve
ubuntucve
CVE-2022-4900
2023-11-02 00:00:00
osv
osv
BIT-php-2022-4900
2024-03-06 11:02:23
CVE-2022-4900
2023-11-02 16:15:08
php7.0, php7.2, php7.4, php8.1 vulnerabilities
2024-04-29 14:19:01
cvelist
cvelist
CVE-2022-4900 Potential buffer overflow in php_cli_server_startup_workers
2023-11-02 15:01:28
debiancve
debiancve
CVE-2022-4900
2023-11-02 16:15:08
ubuntu
ubuntu
PHP vulnerabilities
2024-05-02 00:00:00
PHP vulnerabilities
2024-04-29 00:00:00
redhat
redhat
(RHSA-2023:0848) Moderate: php:8.0 security update
2023-02-21 08:48:54
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.7%
Related for NVD:CVE-2022-4900