CVE-2020-7068

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, information disclosure, cookie forgery or incorrect encryption For the stable distribution (buster), these problems have been fixed in version 7327-1~deb10u1 We recommend that you upgrade your php73 ...

The flaw is in phar_parse_zipfile() of ext/phar/zipc When processing a PHP archive file (phar), if a persistent entry is used as defined in phpini, then memory pointed to by the actual_alias pointer is freed Directly after the free, the actual_alias pointer is passed to zend_hash_str_add_ptr, where it is dereferenced Prior to the function call ...

Tenablesc leverages third-party software to help provide underlying functionality Multiple third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers Out of caution, and in line with best practice, Tenable has upgraded the bundled components to address the potential impact of the ...