Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

PHAR Unserialization

🗓️ 20 Nov 2020 03:05:45Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 41 Views

PHAR Unserialization vulnerability in pear/archive_ta

Related
Detection
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB		CVE-2020-28949
19 Nov 202000:00
–attackerkb
nessus
Tenable Nessus		Amazon Linux 2 : php-pear (ALAS-2021-1584)
7 Jan 202100:00
–nessus
nessus
Tenable Nessus		Amazon Linux AMI : php7-pear (ALAS-2021-1466)
14 Jan 202100:00
–nessus
nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0161: php:7.4 (ALINUX3-SA-2022:0161)
14 May 202500:00
–nessus
nessus
Tenable Nessus		CentOS 8 : php:7.4 (CESA-2022:6542)
15 Sep 202200:00
–nessus
nessus
Tenable Nessus		CentOS 7 : php-pear (RHSA-2022:7340)
9 Oct 202400:00
–nessus
nessus
Tenable Nessus		Debian DLA-2465-1 : php-pear security update
24 Nov 202000:00
–nessus
nessus
Tenable Nessus		Debian DLA-2466-1 : drupal7 security update
30 Nov 202000:00
–nessus
nessus
Tenable Nessus		Debian DSA-4817-1 : php-pear - security update
21 Dec 202000:00
–nessus
nessus
Tenable Nessus		Drupal 7.x < 7.75 / 8.x < 8.8.12 / 8.9.x < 8.9.10 / 9.0.x < 9.0.9 Multiple Vulnerabilities (SA-CORE-2020-013)
27 Nov 202000:00
–nessus
Rows per page
Vulners
Node
OR
AND
drupal7drupal7Match7.70-r0php
alpinelinuxalpine_linuxMatch3.12
AND
drupal7drupal7Match7.70-r0php
alpinelinuxalpine_linuxMatch3.11
AND
googlebionicMatch1:1.10.5+submodules+notgz-1ubuntu1debian
googlebionicMatch1:1.10.5+submodules+notgz-1ubuntu1.18.04.1debian
debiandebian_linux
AND
xenialxenialMatch1:1.10.1+submodules+notgz-6ubuntu0.1debian
debiandebian_linux
AND
drupal7drupal7Match7.52-2+deb9u11debian
debiandebian_linuxMatch9
AND
php-pearphp-pearMatch1:1.10.1+submodules+notgz-9+deb9u1debian
debiandebian_linuxMatch9
AND
php-pearphp-pearMatch1:1.10.9+submodules+notgz-1debian
debiandebian_linuxMatch999
AND
php-pearphp-pearMatch1:1.10.9+submodules+notgz-1debian
debiandebian_linuxMatch11
AND
drupal7drupal7Match7.70-r0php
drupal7drupal7Match7.69-r1php
alpinelinuxalpine_linuxMatchedge
OR
archive_tarpear/archive_tarRange1.3.11–1.4.10php
php-pearphp-pearMatch1.9.4_5.el6
php-pearphp-pearMatch1.10.12_1.module_el8.3.0+396+9a0d79d6
php-pearphp-pearMatch1.10.5_9.module_el8.2.0+313+b04d0a66
php-pearphp-pearMatch1.9.0_2.el6
php-pearphp-pearMatch1.10.5_9.module_el8.1.0+276+68c728ae
php-pearphp-pearMatch1.10.5_9.module_el8.1.0+209+03b9a8ff
php-pearphp-pearMatch1.9.4_22.el7
php-pearphp-pearMatch1.10.9_1.module_el8.2.0+314+53b99e08
php-pearphp-pearMatch1.10.5_8.module_el8.0.0+56+d1ca79aa
php-pearphp-pearMatch1.10.9_1.module_el8.1.0+252+0d4e049c
php-pearphp-pearMatch1.9.4_4.el6
phpphpMatch7.2.24_1.module_el8.2.0+313+b04d0a66
phpphpMatch7.2.11_1.module_el8.0.0+56+d1ca79aa
phpphpMatch7.3.5_5.module_el8.2.0+314+53b99e08
phpphpMatch7.3.20_1.module_el8.2.0+498+4deef2f1
phpphpMatch7.2.11_2.module_el8.1.0+209+03b9a8ff
phpphpMatch7.3.5_3.module_el8.1.0+252+0d4e049c
phpphpMatch7.2.24_1.module_el8.1.0+276+68c728ae
SourceLink
githubwww.github.com/pear/Archive_Tar/issues/33
githubwww.github.com/pear/Archive_Tar/commit/0670a05fdab997036a3fc3ef113b8f5922e574da
listswww.lists.debian.org/debian-lts-announce/2020/11/msg00045.html
debianwww.debian.org/security/2020/dsa-4817
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Mar 2025 23:30Current
4Medium risk
Vulners AI Score4
CVSS 26.8
CVSS 3.17.8
EPSS0.84554
phar unserializationvulnerabilitypear/archive_tarimproper validationfilenameexecution
41