CVE Catalog
CVE-2022-4900
LowSummary
A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code or crash the PHP CLI server, potentially leading to system compromise or denial of service.
Recommendation
Update PHP to a patched version. Avoid setting the PHP_CLI_SERVER_WORKERS variable to very large values.
Original NVD description (English source)
A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.