In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-gdUpgrade php-fpmUpgrade php-develUpgrade php-gmpUpgrade php-dbaUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-jsonUpgrade php-mbstringUpgrade php-processUpgrade php-recodeUpgrade php-cliUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-intlUpgrade php-pecl-apcuUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-ldapUpgrade libzip-develUpgrade php-opcacheUpgrade php-odbcUpgrade php-enchantUpgrade php-commonUpgrade php-pdoUpgrade libzipUpgrade php-bcmathUpgrade phpUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-dbgUpgrade apcu-panelUpgrade php-soap | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php73Upgrade php73Upgrade php72 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-soapUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-fpmUpgrade php-jsonUpgrade php-gdUpgrade php-gd-debuginfoUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-dbaUpgrade php-common-debuginfoUpgrade phpUpgrade php-dbgUpgrade php-recodeUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-ldap-debuginfoUpgrade php-commonUpgrade php-gmp-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-json-debuginfoUpgrade php-recode-debuginfoUpgrade php-ldapUpgrade php-xmlUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-debuginfoUpgrade php-mysqlndUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-cliUpgrade php-embeddedUpgrade php-processUpgrade apcu-panelUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-pdoUpgrade php-develUpgrade php-mbstringUpgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-pearUpgrade php-pgsqlUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpcUpgrade php-dba-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-soapUpgrade php-ldapUpgrade php-pgsqlUpgrade php-commonUpgrade phpUpgrade php-odbcUpgrade php-gdUpgrade php-xmlrpcUpgrade php-processUpgrade php-xmlUpgrade php-mysqlUpgrade php-cliUpgrade php-pdoUpgrade php-recode | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-commonUpgrade php-xmlUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-cliUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-gdUpgrade php-recodeUpgrade php-soapUpgrade phpUpgrade php-pdoUpgrade php-ldapUpgrade php-process | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-recodeUpgrade php-cliUpgrade php-pdoUpgrade php-mysqlUpgrade php-xmlUpgrade php-commonUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-pgsqlUpgrade php-odbcUpgrade php-processUpgrade php-soapUpgrade phpUpgrade php-gd | Feb 24, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-fpmUpgrade php-xmlUpgrade php-pdoUpgrade php-gdUpgrade php-commonUpgrade php-xmlrpcUpgrade php-processUpgrade phpUpgrade php-soapUpgrade php-recodeUpgrade php-ldapUpgrade php-odbcUpgrade php-cli | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade php-pdoUpgrade php-develUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-processUpgrade php-xmlUpgrade php-gdUpgrade php-soapUpgrade php-cliUpgrade libzip-develUpgrade php-embeddedUpgrade php-recodeUpgrade php-enchantUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-dbaUpgrade php-snmpUpgrade libzipUpgrade php-fpmUpgrade php-pearUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pgsqlUpgrade php-intlUpgrade phpUpgrade apcu-panelUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-ldapUpgrade php-commonUpgrade libzip-toolsUpgrade php-dbgUpgrade php-odbcUpgrade php-bcmath | Sep 10, 2020 | Dec 22, 2019 |
| Php | — | Upgrade to PHP version 7.4.1Upgrade to PHP version 7.2.26Upgrade to PHP version 7.3.13 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-dbaUpgrade php-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-zipUpgrade libzip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-gdUpgrade apcu-panelUpgrade php-processUpgrade phpUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-odbc-debuginfoUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gmpUpgrade php-pecl-rrdUpgrade libzipUpgrade php-opcache-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-pgsqlUpgrade libzip-toolsUpgrade php-enchantUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pdoUpgrade php-xmlUpgrade php-pecl-rrd-debugsourceUpgrade php-fpmUpgrade php-develUpgrade php-dbgUpgrade php-bcmathUpgrade php-pearUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-commonUpgrade php-debuginfoUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade php-enchant-debuginfoUpgrade php-mysqlndUpgrade php-cliUpgrade php-snmpUpgrade php-recode-debuginfoUpgrade libzip-develUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-recodeUpgrade php-opcacheUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade libzip-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-debuginfoUpgrade php-soapUpgrade libzip-develUpgrade php-mysqlndUpgrade php-gmp-debuginfoUpgrade php-opcacheUpgrade php-odbcUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-embedded-debuginfoUpgrade phpUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-snmpUpgrade php-pecl-apcu-debugsourceUpgrade php-dba-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-json-debuginfoUpgrade php-gdUpgrade php-soap-debuginfoUpgrade php-cli-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-mbstringUpgrade php-cliUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-xml-debuginfoUpgrade php-debugsourceUpgrade php-ldapUpgrade php-fpmUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-bcmathUpgrade php-gd-debuginfoUpgrade php-enchant-debuginfoUpgrade libzipUpgrade php-pecl-zip-debugsourceUpgrade php-recodeUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-enchantUpgrade php-recode-debuginfoUpgrade php-xmlrpcUpgrade php-mysqlnd-debuginfo | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php72-tidyUpgrade php7-opcacheUpgrade php53-dbaUpgrade php7-imapUpgrade php7-ftpUpgrade php53-gmpUpgrade apache2-mod_php5Upgrade php72-gmpUpgrade php53-suhosinUpgrade php72-exifUpgrade php72-gettextUpgrade php7-iconvUpgrade php7-ldapUpgrade php7-pgsqlUpgrade php53Upgrade php53-wddxUpgrade php72-snmpUpgrade php53-sysvshmUpgrade php7-pear-archive_tarUpgrade php7-develUpgrade php7-pdoUpgrade php72-pgsqlUpgrade php7-domUpgrade php72-pear-archive_tarUpgrade php7-gdUpgrade php72-sysvsemUpgrade php53-pdoUpgrade php7-gmpUpgrade php53-bz2Upgrade php5-ctypeUpgrade php5-pdoUpgrade php53-mbstringUpgrade php7-gettextUpgrade php7-xmlrpcUpgrade php53-opensslUpgrade php7-sodiumUpgrade php7-socketsUpgrade php7-pearUpgrade php7-xslUpgrade php7-shmopUpgrade php5-xmlwriterUpgrade php53-zipUpgrade php72-readlineUpgrade php7-sqliteUpgrade php72-ftpUpgrade php5-domUpgrade php72-zlibUpgrade php72-opcacheUpgrade php5-soapUpgrade php7-testUpgrade php53-fastcgiUpgrade php7-readlineUpgrade php5-mbstringUpgrade php7-posixUpgrade php53-shmopUpgrade php7-dbaUpgrade php53-gettextUpgrade php72-bcmathUpgrade php53-sysvmsgUpgrade php5-jsonUpgrade php53-pspellUpgrade php72-fileinfoUpgrade php53-iconvUpgrade php7-mysqlUpgrade php5-wddxUpgrade php5-ftpUpgrade php72-xmlreaderUpgrade php7-bz2Upgrade php53-ctypeUpgrade php5-imapUpgrade php53-zlibUpgrade php5-pharUpgrade php7-tidyUpgrade php7Upgrade php5-exifUpgrade php5-sysvsemUpgrade php72-ctypeUpgrade php53-xmlreaderUpgrade php5-gmpUpgrade php53-exifUpgrade php72-odbcUpgrade php5-snmpUpgrade apache2-mod_php7Upgrade php72-xmlrpcUpgrade php5-opcacheUpgrade php72-enchantUpgrade php7-zlibUpgrade php7-sysvmsgUpgrade php72-xmlwriterUpgrade php5-bz2Upgrade php72-sodiumUpgrade php5-iconvUpgrade php7-xmlreaderUpgrade php7-fpmUpgrade php7-zipUpgrade php7-firebirdUpgrade php7-odbcUpgrade php53-gdUpgrade php53-xmlwriterUpgrade php53-snmpUpgrade php72-iconvUpgrade php53-pearUpgrade php53-curlUpgrade php5-gettextUpgrade php5-xmlrpcUpgrade php5-zipUpgrade php7-soapUpgrade php53-pcntlUpgrade php53-odbcUpgrade php72Upgrade php72-sysvshmUpgrade php5-xmlreaderUpgrade php53-ftpUpgrade apache2-mod_php53Upgrade php7-exifUpgrade php5-mcryptUpgrade php7-embedUpgrade php7-sysvshmUpgrade php53-jsonUpgrade php72-fastcgiUpgrade php53-pgsqlUpgrade php5-intlUpgrade php72-soapUpgrade php5-ldapUpgrade php72-pspellUpgrade php5-fastcgiUpgrade php7-enchantUpgrade php72-socketsUpgrade php5-socketsUpgrade php72-intlUpgrade php72-pcntlUpgrade php53-soapUpgrade php72-bz2Upgrade php72-opensslUpgrade php72-mbstringUpgrade php53-tokenizerUpgrade php53-fileinfoUpgrade php53-mysqlUpgrade php7-sysvsemUpgrade php7-opensslUpgrade php5-pgsqlUpgrade php5-fpmUpgrade php72-shmopUpgrade php7-mcryptUpgrade php72-curlUpgrade php72-tokenizerUpgrade php72-zipUpgrade php7-snmpUpgrade php72-ldapUpgrade php53-calendarUpgrade php72-imapUpgrade php7-intlUpgrade php5-bcmathUpgrade php5-zlibUpgrade php5-fileinfoUpgrade php7-pspellUpgrade php7-pcntlUpgrade php5-posixUpgrade php5-gdUpgrade php72-pdoUpgrade php72-dbaUpgrade php7-tokenizerUpgrade php5-sysvmsgUpgrade php5-pspellUpgrade php53-xslUpgrade php5-mysqlUpgrade php53-xmlrpcUpgrade php5-xslUpgrade php72-posixUpgrade php5-odbcUpgrade php5-opensslUpgrade apache2-mod_php72Upgrade php5-sysvshmUpgrade php7-xmlwriterUpgrade php72-fpmUpgrade php7-wddxUpgrade php7-jsonUpgrade php72-gdUpgrade php5-enchantUpgrade php5-calendarUpgrade php53-mcryptUpgrade php53-sysvsemUpgrade php7-ctypeUpgrade php72-pharUpgrade php72-mysqlUpgrade php72-sysvmsgUpgrade php72-calendarUpgrade php72-wddxUpgrade php72-xslUpgrade php7-fastcgiUpgrade php53-bcmathUpgrade php5-curlUpgrade php5-shmopUpgrade php5-tokenizerUpgrade php5-develUpgrade php53-domUpgrade php72-sqliteUpgrade php72-jsonUpgrade php72-develUpgrade php53-ldapUpgrade php5-pearUpgrade php7-bcmathUpgrade php53-intlUpgrade php72-domUpgrade php5-suhosinUpgrade php7-curlUpgrade php5Upgrade php7-pharUpgrade php5-pcntlUpgrade php72-pearUpgrade php5-sqliteUpgrade php5-dbaUpgrade php7-mbstringUpgrade php7-fileinfoUpgrade php7-calendar | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade php7.3-fpmUpgrade php5-fpmUpgrade php7.2-cliUpgrade libapache2-mod-php5Upgrade php7.3-mbstringUpgrade php7.2-bcmathUpgrade libapache2-mod-php7.2Upgrade php7.0-fpmUpgrade php7.0-bcmathUpgrade php5-cliUpgrade libapache2-mod-php7.3Upgrade php7.0-mbstringUpgrade php7.3-bcmathUpgrade php5-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.2-mbstringUpgrade php5-cli (Ubuntu Pro)Upgrade php5-xmlrpc (Ubuntu Pro)Upgrade php7.3-cgiUpgrade php7.0-cgiUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.2-xmlrpcUpgrade php7.3-cliUpgrade php7.0-cliUpgrade php7.3-xmlrpcUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.2-cgiUpgrade php5-xmlrpcUpgrade php7.2-fpmUpgrade php7.0-xmlrpc | Jan 16, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub