CVE-2020-7066

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the get_headers() and possibly send some information to a wrong server.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-170

Affected software

Vendor	Product	Versions
PHP Group	PHP	7.2.x below 7.2.29; 7.3.x below 7.3.16; 7.4.x below 7.4.4

References

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.htmlThird Party Advisory
https://bugs.php.net/bug.php?id=79329Exploit, Issue Tracking, Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/04/msg00021.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20200403-0001/Third Party Advisory
https://usn.ubuntu.com/4330-2/Third Party Advisory
https://www.debian.org/security/2020/dsa-4717Third Party Advisory
https://www.debian.org/security/2020/dsa-4719Third Party Advisory
https://www.tenable.com/security/tns-2021-14Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.htmlThird Party Advisory
https://bugs.php.net/bug.php?id=79329Exploit, Issue Tracking, Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/04/msg00021.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20200403-0001/Third Party Advisory
https://usn.ubuntu.com/4330-2/Third Party Advisory
https://www.debian.org/security/2020/dsa-4717Third Party Advisory
https://www.debian.org/security/2020/dsa-4719Third Party Advisory
https://www.tenable.com/security/tns-2021-14Patch, Third Party Advisory

Timeline

Published: Apr 1, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-70677.5In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode()CVE-2020-70683.6In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_z CVE-2020-70696.5In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function wit CVE-2020-70705.3In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cooki CVE-2020-70715.3In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_U CVE-2020-70797.8An improper signature validation vulnerability in Autodesk Dynamo BIM versions 2.5.1 and 2.5.0 may lead to code execution through maliciousl CVE-2020-70807.8A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution on a system running CVE-2020-70818.8A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system runnin CVE-2020-70828.8A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a system running it.CVE-2020-70836.5An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of the application.CVE-2020-70845.5A NULL pointer dereference vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of the applicatio CVE-2020-70857.8A heap overflow vulnerability in the Autodesk FBX-SDK versions 2019.2 and earlier may lead to arbitrary code execution on a system running i