Total vulnerabilities in the database
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
| Software | From | Fixed in |
|---|---|---|
| php / php | 7.4.0 | 7.4.9 |
| php / php | 7.3.0 | 7.3.21 |
| php / php | 7.2.0 | 7.2.33 |
| debian / debian_linux | 10.0 | 10.0.x |
| tenable / tenable.sc | - | 5.19.0 |