| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 7.2.0, < 7.2.33≥ 7.3.0, < 7.3.21≥ 7.4.0, < 7.4.9 | 7.2.337.3.217.4.9 |
| tenable.sc | < 5.19.0 | 5.19.0 |
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free