Description
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
Remediation
References
Related Vulnerabilities
Drupal Core 7.x Multiple Vulnerabilities (7.0)
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.6.1)
WordPress Plugin Rencontre-Dating Site Multiple Vulnerabilities (3.2.1)
Dotclear Other Vulnerability (CVE-2005-3963)
WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)