ROS-20230418-02

A vulnerability in the PHP programming language is related to the kernel’s path resolution function, which allocates a buffer one
bytes less than necessary, if paths are resolved with a length close to the MAXPATHLEN system parameter, this can cause the byte after the allocated buffer to be overwritten with NUL.
can cause the byte after the allocated buffer to be overwritten with a NUL value. Exploitation of the vulnerability could
allow an attacker acting remotely to cause unauthorized access to or modification of data.
modification.

A vulnerability in the PHP programming language is related to an excessive number of parts when loading an HTTP form
results in high resource consumption and excessive log entries. Exploitation of the
of the vulnerability could allow an attacker acting remotely to cause a denial of service on the
vulnerable server by running out of CPU resources or disk space.