Security Advisory

CVE-2021-21704

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-04 04:00:13

Last updated 2024-09-17 00:45:32

Assigner php

CVSS score 5.0

State PUBLISHED

Description

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.

← Browse all CVEs View on cve.org ↗