Vulnerability Details : CVE-2020-7059
Potential exploit
When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.
Vulnerability category: Information leak
Products affected by CVE-2020-7059
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
- Oracle » Communications Diameter Signaling RouterVersions from including (>=) 8.0 and up to, including, (<=) 8.4cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
- cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*
Threat overview for CVE-2020-7059
Top countries where our scanners detected CVE-2020-7059
Top open port discovered on systems with this issue
80
IPs affected by CVE-2020-7059 175,695
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2020-7059!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2020-7059
0.46%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 75 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-7059
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.4
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:P |
10.0
|
4.9
|
NIST | |
9.1
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
3.9
|
5.2
|
NIST | |
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |
3.9
|
2.5
|
PHP Group |
CWE ids for CVE-2020-7059
-
The product reads data past the end, or before the beginning, of the intended buffer.Assigned by:
- nvd@nist.gov (Primary)
- security@php.net (Secondary)
References for CVE-2020-7059
-
https://www.tenable.com/security/tns-2021-14
[R1] Tenable.sc 5.19.0 Fixes Multiple Third-party Vulnerabilities - Security Advisory | Tenable®Patch;Third Party Advisory
-
https://security.netapp.com/advisory/ntap-20200221-0002/
February 2020 PHP Vulnerabilities in NetApp Products | NetApp Product SecurityThird Party Advisory
-
https://www.oracle.com/security-alerts/cpujul2020.html
Oracle Critical Patch Update Advisory - July 2020Third Party Advisory
-
https://seclists.org/bugtraq/2020/Feb/27
Bugtraq: [SECURITY] [DSA 4626-1] php7.3 security updateMailing List;Third Party Advisory
-
https://www.debian.org/security/2020/dsa-4626
Debian -- Security Information -- DSA-4626-1 php7.3Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html
[SECURITY] [DLA 2124-1] php5 security updateThird Party Advisory
-
https://www.oracle.com/security-alerts/cpuApr2021.html
Oracle Critical Patch Update Advisory - April 2021Third Party Advisory
-
https://bugs.php.net/bug.php?id=79099
PHP :: Sec Bug #79099 :: OOB read in php_strip_tags_exExploit;Vendor Advisory
-
https://usn.ubuntu.com/4279-1/
USN-4279-1: PHP vulnerabilities | Ubuntu security noticesPatch;Third Party Advisory
-
https://security.gentoo.org/glsa/202003-57
PHP: Multiple vulnerabilities (GLSA 202003-57) — Gentoo securityThird Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html
[security-announce] openSUSE-SU-2020:0341-1: important: Security updateThird Party Advisory
-
https://www.debian.org/security/2020/dsa-4628
Debian -- Security Information -- DSA-4628-1 php7.0Third Party Advisory
-
https://seclists.org/bugtraq/2020/Feb/31
Bugtraq: [SECURITY] [DSA 4628-1] php7.0 security updateMailing List;Third Party Advisory
-
https://seclists.org/bugtraq/2021/Jan/3
Mailing List;Third Party Advisory
Jump to