CVE-2022-4900

MEDIUM

PHP < 8.0.22 - Heap Buffer Overflow via PHP_CLI_SERVER_WORKERS Environment Variable

Title source: llm

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Core 4

Core References

Third Party Advisory

Vendor Advisory vdb-entry x_refsource_redhat

Issue Tracking issue-tracking x_refsource_redhat

Mailing List

CVSS v3 6.2

EPSS 0.0006

EPSS Percentile 20.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-119 CWE-787

Status published

Products (6)

php/php < 8.0.22

redhat/enterprise_linux 6.0

redhat/enterprise_linux 7.0

redhat/enterprise_linux 8.0

redhat/enterprise_linux 9.0

redhat/software_collections

Published Nov 02, 2023

Tracked Since Feb 18, 2026