Vulnerability in php: UNKNOWN READ in zend_gc_delref
Summary
OSV-2020-1700: UNKNOWN READ in zend_gc_delref. Affects php across 2 version ranges.
>= 1d0f55315e08d0fd7a9f9f4e7c4595e3f9d7a7f4, < daf222c9f88e2aac41437ca97cfe2c60300eed23
< c4016ecd446ef26bb3dc77735b6e441e151ea985
Fixed in daf222c9f88e2aac41437ca97cfe2c60300eed23. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The php package is a popular open-source programming language widely used for web development. It provides a powerful and flexible platform for building dynamic websites and applications. The vulnerability in question, identified as UNKNOWN READ in zend_gc_delref, poses a potential security risk to applications utilizing the php package.
Vulnerability Detail
The vulnerability originates from a flaw in the zend_gc_delref function within the php package. It can lead to an UNKNOWN READ crash state, resulting in potential unauthorized access or information disclosure. The exact impact and consequences of this vulnerability may vary depending on the specific implementation and usage of the php package.
How To Fix
Minimum fixed version
daf222c9f88e2aac41437ca97cfe2c60300eed23
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is advised to follow the recommended fix and update the php package to a fixed version.
Conclusion
In conclusion, the php package is affected by a vulnerability known as UNKNOWN READ in zend_gc_delref. It is crucial to update the php package to a fixed version to mitigate the potential risks associated with this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for php →
FAQ
The php package is an open-source programming language commonly used for web development. It provides a versatile platform for creating dynamic websites and applications.
The vulnerability can potentially lead to unauthorized access or information disclosure, depending on how the php package is implemented and used.
To fix this vulnerability, update the php package to a version that includes the fix. Refer to the provided fixed versions for the php package.
No specific workaround has been provided for this vulnerability. It is recommended to update the php package to a fixed version.
For more information about this vulnerability, refer to the provided OSS-Fuzz report and the source link in the database-specific section of the vulnerability details.
References
Related vulnerabilities
Recent vulnerabilities recorded for php.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
