Lucene search

K
osvGoogleOSV:BIT-PHP-2021-21702
HistoryMar 06, 2024 - 11:05 a.m.

BIT-php-2021-21702

2024-03-0611:05:31
Google
osv.dev
6
php
soap
vulnerability
malformed xml
null pointer

6.6 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.4%

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash.

CPENameOperatorVersion
phpge7.4.0
phplt8.0.2
phpge7.3.0
phpge8.0.0
phplt7.3.27
phplt7.4.15