An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbaUpgrade php-commonUpgrade php-snmpUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-mbstringUpgrade php-soapUpgrade php-intlUpgrade php-processUpgrade php-xmlrpcUpgrade php-opcacheUpgrade libzip-develUpgrade libzip-toolsUpgrade php-gdUpgrade php-cliUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-jsonUpgrade phpUpgrade php-pecl-zipUpgrade php-pearUpgrade php-xmlUpgrade php-pgsqlUpgrade php-fpmUpgrade php-bcmathUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade libzipUpgrade php-gmpUpgrade php-pdoUpgrade php-embeddedUpgrade php-recodeUpgrade php-odbc | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-recodeUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-gdUpgrade php-dbg-debuginfoUpgrade php-soapUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debugsourceUpgrade libzip-toolsUpgrade php-develUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cliUpgrade php-dbaUpgrade php-soap-debuginfoUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pearUpgrade php-processUpgrade php-mbstringUpgrade php-ldapUpgrade php-gmpUpgrade php-enchantUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-dbgUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pdo-debuginfoUpgrade php-snmpUpgrade php-opcacheUpgrade php-commonUpgrade php-pdoUpgrade libzip-develUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-bcmathUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade phpUpgrade libzipUpgrade php-json-debuginfoUpgrade apcu-panel | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-enchantUpgrade php-soapUpgrade libzipUpgrade php-pdoUpgrade libzip-toolsUpgrade php-gdUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-pearUpgrade php-processUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-recodeUpgrade apcu-panelUpgrade php-intlUpgrade phpUpgrade php-pgsqlUpgrade php-fpmUpgrade php-snmpUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-develUpgrade php-commonUpgrade php-bcmathUpgrade php-odbcUpgrade php-xmlUpgrade libzip-develUpgrade php-ldapUpgrade php-cli | Jul 22, 2024 | Dec 29, 2018 |
| Php | — | Upgrade to PHP version 7.2.14Upgrade to PHP version 7.3.2 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-pecl-zip-debugsourceUpgrade php-gdUpgrade php-pdoUpgrade php-opcache-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dbaUpgrade php-intlUpgrade php-cli-debuginfoUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-jsonUpgrade php-mbstring-debuginfoUpgrade php-pdo-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-pgsqlUpgrade php-odbcUpgrade php-xml-debuginfoUpgrade php-process-debuginfoUpgrade php-develUpgrade libzip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-commonUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-dba-debuginfoUpgrade php-soapUpgrade php-bcmathUpgrade php-dbgUpgrade php-debuginfoUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-pgsql-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mysqlndUpgrade php-gd-debuginfoUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade libzip-toolsUpgrade php-pecl-apcu-debuginfoUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-fpmUpgrade libzip-develUpgrade php-pearUpgrade php-processUpgrade php-debugsourceUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-enchantUpgrade php-common-debuginfoUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-recode | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-processUpgrade php-dbaUpgrade php-snmpUpgrade php-xmlUpgrade php-gmpUpgrade php-enchantUpgrade php-mbstringUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-cliUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-gdUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-fpmUpgrade php-pdoUpgrade php-opcacheUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-develUpgrade php-ldap-debuginfoUpgrade php-recodeUpgrade php-dbg-debuginfoUpgrade php-recode-debuginfoUpgrade phpUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-soap-debuginfoUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-ldapUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-fpm-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-intlUpgrade php-debuginfoUpgrade php-commonUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debugsource | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php7-ctypeUpgrade php72-pharUpgrade php72-wddxUpgrade php72-sqliteUpgrade php72-pearUpgrade php7-fpmUpgrade apache2-mod_php7Upgrade php7-sysvsemUpgrade php7-enchantUpgrade libmemcachedUpgrade php72-ldapUpgrade php72-bz2Upgrade php72-mysqlUpgrade php7-readlineUpgrade apache2-mod_php72Upgrade php7-sodiumUpgrade php72-curlUpgrade libmemcached11Upgrade php72-xslUpgrade php7-mbstringUpgrade php72-intlUpgrade php72-gdUpgrade php7-xmlwriterUpgrade php7-jsonUpgrade php72-sysvshmUpgrade php7-fileinfoUpgrade php72-tokenizerUpgrade libmemcached-develUpgrade libtidy-0_99-0-develUpgrade php7-calendarUpgrade php7-dbaUpgrade php7-sysvshmUpgrade php72-calendarUpgrade php7-pcntlUpgrade php72-jsonUpgrade php7-curlUpgrade php72-opensslUpgrade php72-mbstringUpgrade php72-shmopUpgrade php72-sysvmsgUpgrade php72-domUpgrade php7-firebirdUpgrade php7-intlUpgrade php7-opensslUpgrade php72-zipUpgrade php72-dbaUpgrade php72-fpmUpgrade php72-pdoUpgrade php72-soapUpgrade php72-pcntlUpgrade php7-fastcgiUpgrade php72-exifUpgrade libtidy-0_99-0Upgrade php7-socketsUpgrade php7-embedUpgrade php7-domUpgrade php7-posixUpgrade php72-ftpUpgrade php7-snmpUpgrade php72-readlineUpgrade php72-snmpUpgrade php7-odbcUpgrade php7-pdoUpgrade php72-gettextUpgrade php7-iconvUpgrade php7-zlibUpgrade php7-pear-archive_tarUpgrade php7-gettextUpgrade php72-posixUpgrade php7-mysqlUpgrade php72-gmpUpgrade php72-xmlwriterUpgrade php72-odbcUpgrade php7Upgrade php7-testresultsUpgrade php72-bcmathUpgrade php72-zlibUpgrade php72-imapUpgrade php72-fastcgiUpgrade php72-fileinfoUpgrade php7-wddxUpgrade php7-sysvmsgUpgrade php7-exifUpgrade php7-ldapUpgrade php7-ftpUpgrade php72-opcacheUpgrade php7-bz2Upgrade php7-opcacheUpgrade tidyUpgrade php72-xmlrpcUpgrade php72-pear-archive_tarUpgrade php72-iconvUpgrade php7-xmlrpcUpgrade php7-sqliteUpgrade php72Upgrade php7-tokenizerUpgrade php72-enchantUpgrade php7-xslUpgrade php7-gmpUpgrade php72-develUpgrade php72-socketsUpgrade php72-xmlreaderUpgrade php7-develUpgrade libmemcachedutil2Upgrade php7-pharUpgrade php7-shmopUpgrade php7-pgsqlUpgrade php7-gdUpgrade php72-sysvsemUpgrade php72-pspellUpgrade php72-memcachedUpgrade php72-ctypeUpgrade php7-zipUpgrade php7-xmlreaderUpgrade php7-pearUpgrade php7-tidyUpgrade php7-soapUpgrade php7-bcmathUpgrade php72-pgsqlUpgrade php72-tidy | Jun 18, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php7.0-mbstringUpgrade php5-cliUpgrade php7.0-cgiUpgrade php7.0-xmlrpcUpgrade php7.0-fpmUpgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-xmlrpcUpgrade php5-fpmUpgrade php7.0-cliUpgrade libapache2-mod-php7.0 | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub