| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 7.1.0≥ 7.0.0, < 7.0.15≤ 5.6.29 | 7.0.15 |
Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free