Ubuntu: Security Advisory (USN-3902-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Internet Bug Bounty: Memory corruption when parsing a hostile PHAR archive

The vulnerability was reported to PHP's security team and was fixed: Ticket 73768: https://bugs.php.net/bug.php?id=73768 Git commit: https://gist.github.com/anonymous/84961673ee34be7f1a52b83dd872af50 The PHAR module in all PHP versions 5.6.9 and below, 7.1.0 and below is vulnerable to a memory...

PHP PHAR 'ext/phar/tar.c' Stack Buffer Overflow Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP PHAR 'ext/phar/tar.c' suffers from a stack buffer overflow vulnerability due to the program failing to adequately check user-supplied input...