CVE-2020-7061

Name	CVE-2020-7061
Description	In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
php5	source	(unstable)	(not affected)
php7.0	source	(unstable)	(not affected)
php7.3	source	(unstable)	(not affected)
php7.4	source	(unstable)	(not affected)

Notes

- php7.4 <not-affected> (Windows specific issue)
- php7.3 <not-affected> (Windows specific issue)
- php7.0 <not-affected> (Windows specific issue)
- php5 <not-affected> (Windows specific issue)
Fixed in PHP 7.4.3, 7.3.15
PHP Bug: https://bugs.php.net/79171