The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
PHP
Buffer Overflow
Denial Of Service
Apple
Mac Os X
NVD
CVSS 3.0
8.2
EPSS
4.3%