CVE 2022-4900

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Related bugs and status

CVE-2022-4900 (Candidate) is related to these bugs:

Bug #2057576: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

		In	Importance	Status
2057576	php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status	php7.4 (Ubuntu)	Undecided	Invalid
2057576	php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status	php8.1 (Ubuntu)	Undecided	Invalid
2057576	php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status	php8.2 (Ubuntu)	Undecided	Invalid
2057576	php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status	php8.1 (Ubuntu Jammy)	Undecided	Fix Released
2057576	php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status	php8.2 (Ubuntu Mantic)	Undecided	Fix Committed
2057576	php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status	php7.4 (Ubuntu Focal)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.