Segv on unknown address in cleanup_live_vars in php
Summary
OSV-2023-1075: Segv on unknown address in cleanup_live_vars. Affects php across 3 version ranges.
>= 3eba1a876a12d02d478e2d714d6449ed8c9585a9
< 19dfe05f16ce3317fe36e41fa7857de59a771cae
>= e270ee3008829fa50142ff39b2f6e5d2fa9cc665, < 125dbb2c03185fa7a581146522094b0fd6c3f196
No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PHP is a popular general-purpose scripting language widely used for web development. It is known for its simplicity, flexibility, and extensive support for various databases. This vulnerability affects the PHP package and is related to a segmentation fault (Segv) occurring in the cleanup_live_vars function. The vulnerability was reported through the OSS-Fuzz project and can lead to crashes in certain scenarios.
Vulnerability Detail
The vulnerability occurs in the cleanup_live_vars function of PHP. When triggered, it can result in a segmentation fault, causing the program to crash. The specific cause of the fault is currently unknown. This vulnerability has the potential to be exploited by attackers to disrupt PHP applications and potentially execute arbitrary code. It is important to note that the severity of this vulnerability is not specified in the available information.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, the Segv on unknown address vulnerability in PHP can lead to crashes in PHP applications. It is recommended to update the PHP package to a version that addresses this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for php →
FAQ
PHP is a popular scripting language used for web development.
A segmentation fault (Segv) is a specific kind of error caused by accessing memory that does not belong to a program.
If successfully exploited, this vulnerability could allow attackers to crash PHP applications and potentially execute arbitrary code.
No, the available information does not specify the severity of this vulnerability.
To fix this vulnerability, update the PHP package to a version that includes the necessary patches.
References
Related vulnerabilities
Recent vulnerabilities recorded for php.
