CVE-2022-4900 - CVE House
Back to Database
Status published Medium CVE-2022-4900

Potential buffer overflow in php_cli_server_startup_workers

Vulnerability Description

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4900

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

php, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Software Collections, Fedora
Vulnerable Versions:
8.0.22

Timeline

Official Publish: November 2nd, 2023
Last Modified: November 3rd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)