In PHP versions 7.2.x below 7.2.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
影响性分析说明：
原理分析：
openEuler评分：
受影响版本：
规避方案或消减措施：
新值
漏洞编号：CVE-2020-7068
漏洞归属组件：php
漏洞归属版本：7.2.x below 7.2.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9
In PHP versions 7.2.x below 7.2.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
In PHP versions 7.2.x below 7.2.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
In PHPversions 7.2.x below 7.2.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
In PHP versions 7.2.x below 7.2.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
In PHP versions 7.2.x below 7.2.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
openeuler-ci-bot
拥有者
