USN-9055-1: pecl_http vulnerability

It was discovered that pecl_http incorrectly handled certain HTTP request parameters, leading to a type confusion. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or execute arbitrary code.

Quelle: Originalartikel öffnen