Incorrect Calculation Of Buffer Size

🗓️ 17 Feb 2023 10:23:44Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 63 Views

PHP vulnerability in buffer size calculatio

Reporter	Title	Published	Views	Family All 189
ALT Linux	Security fix for the ALT Linux 10 package php8.1 version 8.1.16-alt1	17 Feb 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.0 version 8.0.28-alt1	21 Feb 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.2 version 8.2.3-alt1	21 Feb 202300:00	–	altlinux
Tenable Nessus	Amazon Linux 2023 : php8.1, php8.1-bcmath, php8.1-cli (ALAS2023-2023-139)	23 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : php, --advisory ALAS2-2025-2832 (ALAS-2025-2832)	17 Apr 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : php (ALASPHP8.0-2023-002)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : php (ALASPHP8.1-2023-002)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : php (ALASPHP8.2-2023-001)	13 Sep 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0277: php:7.4 (ALINUX3-SA-2024:0277)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : php (ALSA-2023:5926)	21 Oct 202300:00	–	nessus

Vulners

Node

php8 php8Match8.0.22-r0os

AND

php8 php8Match8.0.26-r0os

AND

php8 php8Match8.0.19-r0os

AND

php8 php8Match8.0.20-r0os

AND

php8 php8Match8.0.27-r0os

AND

php8 php8Match8.0.21-r0os

AND

php8 php8Match8.0.18-r1os

AND

php8 php8Match8.0.25-r0os

AND

php8 php8Match8.0.19-r1os

AND

php8 php8Match8.0.24-r0os

AND

alpinelinux alpine_linuxMatch3.16

php82 php82Match8.2.0_rc4-r2os

AND

php82 php82Match8.2.0_beta3-r1os

AND

php82 php82Match8.2.0_rc2-r0os

AND

php82 php82Match8.2.0_beta2-r1os

AND

php82 php82Match8.2.0_rc4-r3os

AND

php82 php82Match8.2.0-r0os

AND

php82 php82Match8.2.0_beta2-r0os

AND

php82 php82Match8.2.0_rc5-r0os

AND

php82 php82Match8.2.0_rc4-r0os

AND

php82 php82Match8.2.0_rc4-r1os

AND

php82 php82Match8.2.0_alpha2-r0os

AND

php82 php82Match8.2.0_beta1-r2os

AND

php82 php82Match8.2.0_alpha1-r0os

AND

php82 php82Match8.2.0_rc6-r0os

AND

php82 php82Match8.2.0_rc3-r0os

AND

php82 php82Match8.2.1-r0os

AND

php82 php82Match8.2.0_beta1-r0os

AND

php82 php82Match8.2.2-r0os

AND

php82 php82Match8.2.0_rc7-r0os

AND

php82 php82Match8.2.0_alpha3-r0os

AND

php82 php82Match8.2.0_rc1-r1os

AND

php82 php82Match8.2.0_alpha3-r1os

AND

alpinelinux alpine_linuxMatchedge

php81 php81Match8.1.15-r0os

AND

php81 php81Match8.1.13-r0os

AND

php81 php81Match8.1.14-r0os

AND

php81 php81Match8.1.12-r1os

AND

php81 php81Match8.1.12-r0os

AND

alpinelinux alpine_linuxMatch3.17

php81 php81Match8.1.0_rc4-r1os

AND

php81 php81Match8.1.0_rc2-r0os

AND

php81 php81Match8.1.6-r0os

AND

php81 php81Match8.1.2-r0os

AND

php81 php81Match8.1.14-r0os

AND

php81 php81Match8.1.0_rc5-r1os

AND

php81 php81Match8.1.0_rc2-r2os

AND

php81 php81Match8.1.11-r0os

AND

php81 php81Match8.1.6-r1os

AND

php81 php81Match8.1.10-r0os

AND

php81 php81Match8.1.5-r2os

AND

php81 php81Match8.1.7-r0os

AND

php81 php81Match8.1.4-r0os

AND

php81 php81Match8.1.11-r1os

AND

php81 php81Match8.1.8-r1os

AND

php81 php81Match8.1.9-r0os

AND

php81 php81Match8.1.0_rc2-r1os

AND

php81 php81Match8.1.8-r3os

AND

php81 php81Match8.1.5-r1os

AND

php81 php81Match8.1.3-r1os

AND

php81 php81Match8.1.12-r0os

AND

php81 php81Match8.1.15-r0os

AND

php81 php81Match8.1.8-r2os

AND

php81 php81Match8.1.8-r0os

AND

php81 php81Match8.1.0-r0os

AND

php81 php81Match8.1.13-r0os

AND

php81 php81Match8.1.2-r2os

AND

php81 php81Match8.1.6-r2os

AND

php81 php81Match8.1.0_rc3-r0os

AND

php81 php81Match8.1.2-r3os

AND

php81 php81Match8.1.12-r1os

AND

php81 php81Match8.1.3-r0os

AND

php81 php81Match8.1.11-r2os

AND

php81 php81Match8.1.1-r0os

AND

php81 php81Match8.1.11-r3os

AND

php81 php81Match8.1.0_rc1-r0os

AND

alpinelinux alpine_linuxMatchedge

focal focalMatch7.4.3-4ubuntu2.3debian

AND

focal focalMatch7.4.3-4ubuntu1debian

AND

focal focalMatch7.4.3-4ubuntu2.2debian

AND

focal focalMatch7.4.3-4ubuntu2.4debian

AND

debian debian_linux

google bionicMatch7.2.24-0ubuntu0.18.04.9debian

AND

google bionicMatch7.2.3-1ubuntu1debian

AND

google bionicMatch7.2.24-0ubuntu0.18.04.7debian

AND

google bionicMatch7.2.24-0ubuntu0.18.04.8debian

AND

google bionicMatch7.2.24-0ubuntu0.18.04.6debian

AND

debian debian_linux

php7.4 php7.4Match7.4.11-1debian

AND

debian debian_linuxMatch11

php7.3 php7.3Match7.3.19-1~deb10u1debian

AND

php7.3 php7.3Match7.3.27-1~deb10u1debian

AND

debian debian_linuxMatch10

php81 php81Match8.1.11-r0os

AND

php81 php81Match8.1.6-r0os

AND

php81 php81Match8.1.12-r0os

AND

php81 php81Match8.1.14-r0os

AND

php81 php81Match8.1.9-r0os

AND

php81 php81Match8.1.8-r0os

AND

php81 php81Match8.1.13-r0os

AND

php81 php81Match8.1.7-r0os

AND

php81 php81Match8.1.6-r1os

AND

alpinelinux alpine_linuxMatch3.16

php7 php7Match7.4.25-r0os

AND

php7 php7Match7.4.25-r1os

AND

php7 php7Match7.4.27-r0os

AND

php7 php7Match7.4.32-r0os

AND

php7 php7Match7.4.26-r0os

AND

php7 php7Match7.4.29-r0os

AND

php7 php7Match7.4.30-r0os

AND

php7 php7Match7.4.28-r0os

AND

php7 php7Match7.4.33-r0os

AND

alpinelinux alpine_linuxMatch3.15

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.16/community.yaml
bugs	www.bugs.php.net/bug.php
security	www.security.netapp.com/advisory/ntap-20230517-0001/

13 Feb 2025 19:36Current

8High risk

Vulners AI Score8

CVSS 3.17.5 - 8.1

EPSS0.00569

SSVC