Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification. 

Remediation

References

CVE-2023-0568

Related Vulnerabilities

PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4748)

WordPress Plugin Share This Image Unspecified Vulnerability (1.19)

Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2661)

MySQL CVE-2023-22059 Vulnerability (CVE-2023-22059)

WordPress Plugin Manage Calameo Publications by Athlon Cross-Site Scripting (1.1.0)

Severity

High

Classification

CVE-2023-0568 CWE-770 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities