CVE-2021-21704 in PHPinformación

Resumen

por MITRE • 2021-10-04

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsable

PHP Group

Reservar

2021-01-04

Divulgación

2021-10-04

Moderación

aceptado

Artículo

VDB-183743

CPE

listo

EPSS

0.00150

KEV

no

Actividades

muy bajo

Fuentes

Do you need the next level of professionalism?

Upgrade your account now!