USN-4330-2
Advisory lineage Upstream: 6 Downstream: 0
Published: 06 May 2020, 12:05
Last modified:22 Apr 2026, 10:03
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
06 May 2020, 12:05
Published
Vulnerability first disclosed
22 Apr 2026, 10:03
Last Modified
Vulnerability information updated
Description
php7.4 vulnerabilities USN-4330-1 fixed vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain EXIF files. An attacker could possibly use this issue to access sensitive information or cause a crash. (CVE-2020-7064) It was discovered that PHP incorrectly handled certain UTF strings. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2020-7065) It was discovered that PHP incorrectly handled certain URLs. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-7066)
Affected Systems
- ubuntu•php7.4
< 7.4.3-4ubuntu1.1