Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2023/10/19 1:19 p.m.8 views

php: Password_verify() always return true with some hash

A vulnerability was found in PHP. This security flaw occurs when malformatted BCrypt hashes that include a $ within their salt part trigger a buffer overread and may erroneously validate any password as valid...

8.1CVSS7.4AI score0.00947EPSS
SaveExploits1References5
OSV
OSV
added 2023/02/24 2:01 p.m.11 views

SUSE-SU-2023:0513-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2023-0568: Fixed NULL byte off-by-one in phpcheckspecificopenbasedir bnc1208366. - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body bnc1208367. - CVE-2023-0567: Fixed vulnerability where BCrypt hashes erroneously...

8.1CVSS8AI score0.01408EPSS
SaveExploits2References7
Rows per page
Query Builder