Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2022-4900

Potential buffer overflow in php_cli_server_startup_workers

Description

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a php

  • 8.0.22unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: affected

Fedora Fedora

Default version status: affected

References