Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-xmlUpgrade php-cliUpgrade php-mysqlndUpgrade libzip-develUpgrade phpUpgrade php-embeddedUpgrade php-commonUpgrade php-ldapUpgrade php-intlUpgrade php-snmpUpgrade apcu-panelUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-dbgUpgrade php-processUpgrade php-dbaUpgrade php-pecl-rrdUpgrade php-ffiUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-soapUpgrade php-fpmUpgrade php-pgsqlUpgrade php-pearUpgrade php-bcmathUpgrade php-develUpgrade php-enchantUpgrade libzipUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-pecl-apcu-develUpgrade php-gd | Oct 20, 2022 | Nov 19, 2020 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Nov 19, 2020 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Jan 8, 2021 | Nov 19, 2020 |
| Amazon_linux | — | Upgrade php7-pear | Jan 15, 2021 | Nov 19, 2020 |
| Centos_linux | — | Upgrade libzipUpgrade php-gmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pdoUpgrade php-fpm-debuginfoUpgrade php-pecl-zipUpgrade php-gdUpgrade php-debugsourceUpgrade php-processUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade php-embedded-debuginfoUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-dbg-debuginfoUpgrade php-gd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-process-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-toolsUpgrade phpUpgrade php-enchantUpgrade php-dbaUpgrade php-ffiUpgrade php-soapUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-embeddedUpgrade php-bcmathUpgrade php-xml-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebugUpgrade php-soap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-enchant-debuginfoUpgrade php-opcache-debuginfoUpgrade php-fpmUpgrade libzip-debuginfoUpgrade php-pearUpgrade php-mysqlndUpgrade php-develUpgrade libzip-develUpgrade php-snmpUpgrade php-pecl-zip-debuginfoUpgrade php-cliUpgrade php-opcacheUpgrade php-xmlUpgrade php-odbc | Oct 20, 2022 | Nov 19, 2020 |
| Debian | — | Upgrade php-pear | Nov 24, 2020 | Nov 19, 2020 |
| Drupal | — | Upgrade to drupal version 8.9.1Upgrade to drupal version 7.75Upgrade to drupal version 8.8.1Upgrade to drupal version 9.0.9 | Nov 27, 2020 | Nov 19, 2020 |
| Gentoo Linux | — | Upgrade dev-php/PEAR-Archive_Tar. | Jan 26, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Feb 2, 2021 | Nov 19, 2020 |
| Oracle Solaris | — | Upgrade web/php-80 to version 8.0.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade web/php-74 to version 7.4.15-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.27-11.4.32.0.1.88.2 on Solaris 11.4 | Apr 21, 2021 | Nov 19, 2020 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade php-snmpUpgrade libzip-toolsUpgrade php-processUpgrade php-odbcUpgrade libzip-develUpgrade phpUpgrade php-dbaUpgrade php-cliUpgrade php-mysqlndUpgrade php-commonUpgrade php-opcacheUpgrade php-intlUpgrade php-ffiUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-jsonUpgrade php-bcmathUpgrade php-xmlUpgrade php-develUpgrade php-xmlrpcUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-gmpUpgrade php-embeddedUpgrade php-soapUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-mbstringUpgrade libzipUpgrade php-gdUpgrade php-pearUpgrade php-enchant | Sep 17, 2022 | Nov 19, 2020 |
| Redhat_linux | — | Upgrade php-gd-debuginfoUpgrade php-enchantUpgrade libzip-tools-debuginfoUpgrade php-mbstringUpgrade php-pdoUpgrade php-ffi-debuginfoUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-debugsourceUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-bcmathUpgrade php-embeddedUpgrade php-fpmUpgrade php-pearUpgrade php-xmlrpc-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-xmlrpcNo solution existsUpgrade php-ldapUpgrade php-commonUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade libzipUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-dbaUpgrade apcu-panelUpgrade php-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-processUpgrade libzip-debuginfoUpgrade php-opcacheUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debuginfoUpgrade php-json-debuginfoUpgrade php-snmpUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade php-intlUpgrade php-pecl-rrdUpgrade php-dba-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-opcache-debuginfoUpgrade php-odbcUpgrade php-soapUpgrade php-pgsqlUpgrade libzip-debugsourceUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-ldap-debuginfoUpgrade php-ffiUpgrade php-gmp-debuginfoUpgrade phpUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade libzip-devel | Oct 20, 2022 | Nov 19, 2020 |
| Rocky_linux | — | Upgrade php-soapUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-opcache-debuginfoUpgrade php-bcmathUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pdoUpgrade php-pdo-debuginfoUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-xml-debuginfoUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-develUpgrade php-mbstringUpgrade php-commonUpgrade php-enchant-debuginfoUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-cliUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-cli-debuginfoUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ffiUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-ffi-debuginfoUpgrade php-embeddedUpgrade php-pecl-rrd-debugsourceUpgrade php-ldap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-intlUpgrade php-ldapUpgrade libzip-develUpgrade libzip-toolsUpgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-dbaUpgrade phpUpgrade php-pecl-zip-debuginfoUpgrade libzip-debugsourceUpgrade libzipUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-gd-debuginfo | Mar 12, 2024 | Nov 19, 2020 |
| Ubuntu | — | Upgrade drupal7 (Ubuntu Pro)Upgrade php-pear | Dec 2, 2020 | Nov 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub