Lucene search

CVE-2018-20783

🗓️ 21 Feb 2019 00:00:00Reported by ubuntu.comType

PHP buffer over-read in PHAR reading functions. Vulnerable versions: PHP 5.6.39, 7.0.33, 7.1.25, 7.2.13

Reporter	Title	Published	Views	Family All 97
Prion	Design/Logic Flaw	21 Feb 201919:29	–	prion
Prion	Heap overflow	22 Feb 201923:29	–	prion
Veracode	Information Disclosure	20 Aug 201900:10	–	veracode
Debian CVE	CVE-2018-20783	21 Feb 201919:29	–	debiancve
Debian CVE	CVE-2019-9021	22 Feb 201923:29	–	debiancve
RedhatCVE	CVE-2018-20783	19 Jan 202009:40	–	redhatcve
RedhatCVE	CVE-2019-9021	29 Oct 201904:03	–	redhatcve
OSV	CVE-2018-20783	21 Feb 201919:29	–	osv
OSV	CVE-2019-9021	22 Feb 201923:29	–	osv
OSV	php5 - security update	16 Dec 201800:00	–	osv

Source	Link
php	www.php.net/ChangeLog-5.php
php	www.php.net/ChangeLog-7.php
ubuntu	www.ubuntu.com/security/notices/USN-3566-2
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-20783
launchpad	www.launchpad.net/bugs/cve/CVE-2018-20783
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-20783

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	14.04	noarch	php5	5.5.9+dfsg-1ubuntu4.29+esm2	UNKNOWN
ubuntu	16.04	noarch	php7.0	7.0.33-0ubuntu0.16.04.1	UNKNOWN
ubuntu	18.04	noarch	php7.2	7.2.15-0ubuntu0.18.04.1	UNKNOWN
ubuntu	18.10	noarch	php7.2	7.2.15-0ubuntu0.18.04.1	UNKNOWN
ubuntu	19.04	noarch	php7.2	7.2.15-0ubuntu0.18.04.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2019 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS25.0

CVSS37.5

EPSS0.006