Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | php7.0 | 7.0.33-0+deb9u9 |
Vulnerabilities 1
-
Medium 4.8
Use of freed hash key in the phar_parse_zipfile function
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.