Orta CVSS 5.9 PoC var
CVE-2025-1218: Php: yığın (heap) taşması
Açıklama (NVD)
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and can crash the process.
Özet bilgiler
- Ürün
- Php Php
- CVSS v3.1
- 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,28 (yüzdelik 21)
- CWE
- CWE-122
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| php-php | 8.2.0 | — | 8.2.34 |
| php-php | 8.3.0 | — | 8.3.35 |
| php-php | 8.4.0 | — | 8.4.26 |
| php-php | 8.5.0 | — | 8.5.11 |