| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.6.0, < 5.6.30≥ 7.0.0, < 7.0.15≥ 7.1.0, < 7.1.1 | 5.6.307.0.157.1.1 |
Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free