Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

PHAR Unserialization

🗓️ 20 Nov 2020 03:05:45Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 35 Views

PHAR Unserialization vulnerability in pear/archive_ta

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2020-28949
19 Nov 202000:00
–attackerkb
Tenable Nessus		Amazon Linux 2 : php-pear (ALAS-2021-1584)
7 Jan 202100:00
–nessus
Tenable Nessus		Amazon Linux AMI : php7-pear (ALAS-2021-1466)
14 Jan 202100:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0161: php:7.4 (ALINUX3-SA-2022:0161)
14 May 202500:00
–nessus
Tenable Nessus		CentOS 8 : php:7.4 (CESA-2022:6542)
15 Sep 202200:00
–nessus
Tenable Nessus		CentOS 7 : php-pear (RHSA-2022:7340)
9 Oct 202400:00
–nessus
Tenable Nessus		Debian DLA-2465-1 : php-pear security update
24 Nov 202000:00
–nessus
Tenable Nessus		Debian DLA-2466-1 : drupal7 security update
30 Nov 202000:00
–nessus
Tenable Nessus		Debian DSA-4817-1 : php-pear - security update
21 Dec 202000:00
–nessus
Tenable Nessus		Drupal 7.x < 7.75 / 8.x < 8.8.12 / 8.9.x < 8.9.10 / 9.0.x < 9.0.9 Multiple Vulnerabilities (SA-CORE-2020-013)
27 Nov 202000:00
–nessus
Rows per page
Vulners
Node
drupal7drupal7Match7.70-r0php
AND
alpinelinuxalpine_linuxMatch3.12
OR
drupal7drupal7Match7.70-r0php
AND
alpinelinuxalpine_linuxMatch3.11
OR
googlebionicMatch1:1.10.5+submodules+notgz-1ubuntu1debian
AND
googlebionicMatch1:1.10.5+submodules+notgz-1ubuntu1.18.04.1debian
AND
debiandebian_linux
OR
xenialxenialMatch1:1.10.1+submodules+notgz-6ubuntu0.1debian
AND
debiandebian_linux
OR
drupal7drupal7Match7.52-2+deb9u11debian
AND
debiandebian_linuxMatch9
OR
php-pearphp-pearMatch1:1.10.1+submodules+notgz-9+deb9u1debian
AND
debiandebian_linuxMatch9
OR
php-pearphp-pearMatch1:1.10.9+submodules+notgz-1debian
AND
debiandebian_linuxMatch999
OR
php-pearphp-pearMatch1:1.10.9+submodules+notgz-1debian
AND
debiandebian_linuxMatch11
OR
drupal7drupal7Match7.70-r0php
AND
drupal7drupal7Match7.69-r1php
AND
alpinelinuxalpine_linuxMatchedge
OR
archive_tarpear/archive_tarRange1.3.11–1.4.10php
OR
php-pearphp-pearMatch1.9.4_5.el6
OR
php-pearphp-pearMatch1.10.12_1.module_el8.3.0+396+9a0d79d6
OR
php-pearphp-pearMatch1.10.5_9.module_el8.2.0+313+b04d0a66
OR
php-pearphp-pearMatch1.9.0_2.el6
OR
php-pearphp-pearMatch1.10.5_9.module_el8.1.0+276+68c728ae
OR
php-pearphp-pearMatch1.10.5_9.module_el8.1.0+209+03b9a8ff
OR
php-pearphp-pearMatch1.9.4_22.el7
OR
php-pearphp-pearMatch1.10.9_1.module_el8.2.0+314+53b99e08
OR
php-pearphp-pearMatch1.10.5_8.module_el8.0.0+56+d1ca79aa
OR
php-pearphp-pearMatch1.10.9_1.module_el8.1.0+252+0d4e049c
OR
php-pearphp-pearMatch1.9.4_4.el6
OR
phpphpMatch7.2.24_1.module_el8.2.0+313+b04d0a66
OR
phpphpMatch7.2.11_1.module_el8.0.0+56+d1ca79aa
OR
phpphpMatch7.3.5_5.module_el8.2.0+314+53b99e08
OR
phpphpMatch7.3.20_1.module_el8.2.0+498+4deef2f1
OR
phpphpMatch7.2.11_2.module_el8.1.0+209+03b9a8ff
OR
phpphpMatch7.3.5_3.module_el8.1.0+252+0d4e049c
OR
phpphpMatch7.2.24_1.module_el8.1.0+276+68c728ae
SourceLink
githubwww.github.com/pear/Archive_Tar/issues/33
githubwww.github.com/pear/Archive_Tar/commit/0670a05fdab997036a3fc3ef113b8f5922e574da
listswww.lists.debian.org/debian-lts-announce/2020/11/msg00045.html
debianwww.debian.org/security/2020/dsa-4817
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Mar 2025 23:30Current
4Medium risk
Vulners AI Score4
CVSS 26.8
CVSS 3.17.8
EPSS0.93364
phar unserializationvulnerabilitypear/archive_tarimproper validationfilenameexecution
35