VDB
BDU%3A2020-03181
BDU%3A2020-03181
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость функции phar_tar_writeheaders_int (ext/phar/tar.c) интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Canonical Ltd., PHP Group | OpenSUSE Leap, Ubuntu, PHP |
Timeline
- Jul 7, 2020 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- https://bugs.php.net/bug.php?id=77586 url
- https://www.php.net/ChangeLog-7.php url
- https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html url
- https://nvd.nist.gov/vuln/detail/CVE-2019-9675 url
- https://ubuntu.com/security/notices/USN-3922-2 advisory
- https://ubuntu.com/security/notices/USN-3922-3 advisory