Description
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
Remediation
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0093)
Oracle JRE CVE-2012-5089 Vulnerability (CVE-2012-5089)
WordPress Plugin Smooth Scroll Page Up/Down Buttons Cross-Site Scripting (1.3)
WebLogic CVE-2018-3197 Vulnerability (CVE-2018-3197)
WordPress Plugin Advanced Shipment Tracking for WooCommerce Security Bypass (3.2.6)