Null byte termination in dns_get_record()

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2025-12-18 16:11 UTC
  • Importiert: 2026-10-07 06:38 UTC
  • Quelle-ID: php_sec
  • uid_hash: 813f5f4c31c6e52fdcd582111bd8f26a02217562af02aca1a691db84dfca7fe9

Inhalt

Summary

As GHSA-3cr5-j632-f35r, same null termination is occuring

Details

dns_get_record() and other DNS functions don't have any null contain check, leads potential SSRF or unexpected behavior.

PoC

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
PHP Security (php/php-src GHSA)

php_sec

vendor_advisory php, runtime - de https://github.com/php/php-src/security/advisories