Potential buffer overflow in php_cli_server_startup_workers
CVE-2022-4900

5.5MEDIUM

Key Information:

Vendor
Red Hat
Status
PHP
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
2 November 2023

Summary

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Affected Version(s)

php 8.0.22

References

https://access.redhat.com/security/cve/CVE-2022-4900
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2179880
issue-trackingx_refsource_REDHAT
https://security.netapp.com/advisory/ntap-20231130-0008/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.