4.3
CVSSv2

CVE-2020-7066

Published: 01/04/2020 Updated: 08/05/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

It exists that PHP incorrectly handled certain file uploads. An attacker could possibly use this issue to cause a crash. (CVE-2020-7062)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

php php

tenable tenable.sc

tenable tenable.sc 5.19.0

opensuse leap 15.1

debian debian linux 8.0

debian debian linux 9.0

debian debian linux 10.0

Vendor Advisories

Synopsis Moderate: rh-php73-php security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php73-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabilit ...
Synopsis Moderate: php:73 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for the php:73 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability ...
Several security issues were fixed in PHP ...
Several security issues were fixed in PHP ...
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in information disclosure, denial of service or potentially the execution of arbitrary code For the stable distribution (buster), these problems have been fixed in version 7319-1~deb10u1 We recommend that you upgrade your ...
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in information disclosure, denial of service or potentially the execution of arbitrary code For the oldstable distribution (stretch), these problems have been fixed in version 7033-0+deb9u8 We recommend that you upgrade yo ...
In PHP versions 72x below 729, 73x below 7316 and 74x below 7434, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory This could potentially lead to information disclosure or crash (CVE-2020-7064) In PHP versions 72x below 7229, 73x below ...
In PHP versions 72x below 729, 73x below 7316 and 74x below 7434, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory This could potentially lead to information disclosure or crash (CVE-2020-7064) In PHP versions 73x below 7316 and 74x be ...
Tenablesc leverages third-party software to help provide underlying functionality Multiple third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers Out of caution, and in line with best practice, Tenable has upgraded the bundled components to address the potential impact of the ...