When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-fpmUpgrade phpUpgrade php-enchantUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-dbgUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-pdoUpgrade php-ldapUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-develUpgrade php-embeddedUpgrade php-recodeUpgrade php-gdUpgrade php-pearUpgrade php-pgsqlUpgrade php-soapUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-processUpgrade php-cliUpgrade libzip-develUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-intlUpgrade php-commonUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-odbcUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-snmpUpgrade apcu-panel | May 4, 2022 | Feb 10, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 10, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Mar 2, 2020 | Feb 10, 2020 |
| Centos_linux | — | Upgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcuUpgrade php-develUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade php-recodeUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-ldapUpgrade php-pecl-rrd-debuginfoUpgrade php-commonUpgrade php-xmlUpgrade php-snmpUpgrade php-bcmathUpgrade php-pecl-xdebug-debuginfoUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebug-debugsourceUpgrade php-pearUpgrade php-common-debuginfoUpgrade php-opcacheUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-odbc-debuginfoUpgrade php-soapUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-zipUpgrade php-dbaUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-debugsourceUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade php-processUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade php-xmlrpcUpgrade php-bcmath-debuginfoUpgrade php-embeddedUpgrade php-gdUpgrade php-xml-debuginfoUpgrade php-intlUpgrade php-jsonUpgrade php-gmpUpgrade php-mbstring | Sep 9, 2020 | Feb 10, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2020 | Feb 10, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade phpUpgrade php-odbcUpgrade php-pgsqlUpgrade php-commonUpgrade php-pdoUpgrade php-processUpgrade php-xmlrpcUpgrade php-soapUpgrade php-gdUpgrade php-mysqlUpgrade php-recode | Nov 3, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-cliUpgrade php-recodeUpgrade php-mysqlUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-gdUpgrade php-odbcUpgrade php-pgsqlUpgrade php-ldapUpgrade php-commonUpgrade phpUpgrade php-process | Sep 28, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlrpcUpgrade php-fpmUpgrade php-soapUpgrade php-pdoUpgrade php-xmlUpgrade php-processUpgrade php-commonUpgrade php-ldapUpgrade php-cliUpgrade php-recodeUpgrade php-odbcUpgrade phpUpgrade php-gd | Jul 31, 2020 | Feb 10, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Feb 10, 2020 |
| Oracle_linux | — | Upgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-develUpgrade php-processUpgrade php-bcmathUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-pgsqlUpgrade php-commonUpgrade php-soapUpgrade php-mbstringUpgrade php-xmlUpgrade php-cliUpgrade php-embeddedUpgrade php-opcacheUpgrade libzipUpgrade php-snmpUpgrade phpUpgrade libzip-toolsUpgrade php-recodeUpgrade apcu-panelUpgrade php-ldapUpgrade php-odbcUpgrade libzip-develUpgrade php-dbaUpgrade php-intlUpgrade php-dbgUpgrade php-enchantUpgrade php-mysqlnd | Sep 10, 2020 | Jan 23, 2020 |
| Php | — | Upgrade to PHP version 7.2.27Upgrade to PHP version 7.3.14Upgrade to PHP version 7.4.2 | Feb 14, 2020 | Feb 10, 2020 |
| Redhat_linux | — | Upgrade php-mbstringUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-pearUpgrade php-cliUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfoUpgrade php-develUpgrade php-bcmathUpgrade php-ldapUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbgUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-fpmUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade php-snmpNo solution existsUpgrade php-pecl-rrd-debugsourceUpgrade php-recodeUpgrade libzip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php-bcmath-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-dbaUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-enchantUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-odbcUpgrade php-processUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade apcu-panelUpgrade php-gdUpgrade libzipUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-jsonUpgrade php-pgsqlUpgrade phpUpgrade php-gd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbg-debuginfoUpgrade php-cli-debuginfo | Sep 9, 2020 | Feb 10, 2020 |
| Rocky_linux | — | Upgrade php-gdUpgrade php-soap-debuginfoUpgrade php-mbstringUpgrade php-fpmUpgrade php-xmlUpgrade php-cliUpgrade libzip-develUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-recode-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebugUpgrade php-opcache-debuginfoUpgrade php-develUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-debuginfoUpgrade php-dbaUpgrade php-enchantUpgrade php-snmpUpgrade php-recodeUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-gmpUpgrade php-bcmathUpgrade php-cli-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pdoUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-commonUpgrade phpUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-gd-debuginfoUpgrade php-process-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade libzip-debuginfoUpgrade libzipUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-odbcUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dba-debuginfoUpgrade php-ldapUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pdo-debuginfo | Mar 12, 2024 | Feb 10, 2020 |
| Suse | — | Upgrade php72-pearUpgrade php5-gettextUpgrade php7-zlibUpgrade php72-opcacheUpgrade php5-develUpgrade php7-tokenizerUpgrade php7-intlUpgrade php72-sysvmsgUpgrade php72-odbcUpgrade php7-sysvsemUpgrade apache2-mod_php7Upgrade apache2-mod_php72Upgrade php7-enchantUpgrade php72-tokenizerUpgrade php7-xmlwriterUpgrade php5-wddxUpgrade php5-ldapUpgrade php7-pgsqlUpgrade php5-opcacheUpgrade php72-gmpUpgrade php5-xslUpgrade php72-socketsUpgrade php72-xmlreaderUpgrade php7-iconvUpgrade php5-tokenizerUpgrade php7-pcntlUpgrade php5-gdUpgrade php5-pcntlUpgrade php7-testUpgrade php7-wddxUpgrade php7-ctypeUpgrade php72-ldapUpgrade php7-bcmathUpgrade php72-iconvUpgrade php5-dbaUpgrade php5-fileinfoUpgrade php7-mysqlUpgrade php7-opensslUpgrade php5-xmlrpcUpgrade php5-imapUpgrade php5-sysvshmUpgrade php5-suhosinUpgrade php72-shmopUpgrade php5-intlUpgrade php72-bz2Upgrade php72-pdoUpgrade php5-bcmathUpgrade php7-ftpUpgrade php72-opensslUpgrade php72-pspellUpgrade php7-develUpgrade php7-calendarUpgrade php7-odbcUpgrade php72-imapUpgrade php7-snmpUpgrade php7-pharUpgrade php72-readlineUpgrade php72-domUpgrade php7-curlUpgrade php5-fpmUpgrade php5-ctypeUpgrade php7-zipUpgrade apache2-mod_php5Upgrade php72-dbaUpgrade php72-jsonUpgrade php7-sysvmsgUpgrade php5-posixUpgrade php72-xslUpgrade php72-intlUpgrade php72-pharUpgrade php72-soapUpgrade php7-fileinfoUpgrade php5-pgsqlUpgrade php72-fastcgiUpgrade php5-zlibUpgrade php72-calendarUpgrade php5-zipUpgrade php7-fastcgiUpgrade php5-pspellUpgrade php72-enchantUpgrade php72-zipUpgrade php7-mbstringUpgrade php5-enchantUpgrade php72-develUpgrade php72-ftpUpgrade php5-socketsUpgrade php5-xmlwriterUpgrade php5-xmlreaderUpgrade php72-fpmUpgrade php72-pear-archive_tarUpgrade php5-pearUpgrade php7-exifUpgrade php7-embedUpgrade php72-bcmathUpgrade php72-fileinfoUpgrade php7-pdoUpgrade php72-xmlrpcUpgrade php7-readlineUpgrade php7-gdUpgrade php72-sqliteUpgrade php72-tidyUpgrade php72-snmpUpgrade php72-mysqlUpgrade php72-wddxUpgrade php72-sysvsemUpgrade php5-jsonUpgrade php7-shmopUpgrade php72Upgrade php7-pearUpgrade php7-fpmUpgrade php5-sqliteUpgrade php5-ftpUpgrade php72-pgsqlUpgrade php5Upgrade php72-gettextUpgrade php7-sysvshmUpgrade php7-jsonUpgrade php7-ldapUpgrade php7-sqliteUpgrade php7-opcacheUpgrade php7-bz2Upgrade php5-soapUpgrade php5-opensslUpgrade php5-iconvUpgrade php5-shmopUpgrade php7-gettextUpgrade php7-pear-archive_tarUpgrade php72-posixUpgrade php72-pcntlUpgrade php7-posixUpgrade php7-xslUpgrade php7-socketsUpgrade php7-gmpUpgrade php5-curlUpgrade php5-exifUpgrade php5-sysvmsgUpgrade php72-exifUpgrade php5-mysqlUpgrade php5-mbstringUpgrade php5-odbcUpgrade php7Upgrade php72-xmlwriterUpgrade php7-domUpgrade php7-xmlrpcUpgrade php72-curlUpgrade php5-calendarUpgrade php72-zlibUpgrade php7-sodiumUpgrade php5-snmpUpgrade php5-pharUpgrade php5-sysvsemUpgrade php5-fastcgiUpgrade php5-gmpUpgrade php5-mcryptUpgrade php72-ctypeUpgrade php7-dbaUpgrade php7-soapUpgrade php7-firebirdUpgrade php5-pdoUpgrade php7-xmlreaderUpgrade php72-mbstringUpgrade php72-sodiumUpgrade php7-tidyUpgrade php5-domUpgrade php72-gdUpgrade php5-bz2Upgrade php72-sysvshm | Feb 19, 2020 | Feb 10, 2020 |
| Ubuntu | — | Upgrade php7.0-cgiUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-fpmUpgrade libapache2-mod-php5Upgrade php7.0-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.2-cliUpgrade php7.2-fpmUpgrade php7.2-cgiUpgrade php7.3-cgiUpgrade php5-cliUpgrade php7.3-fpmUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php5-cli (Ubuntu Pro)Upgrade php5-cgiUpgrade php7.3-cliUpgrade php5-fpmUpgrade libapache2-mod-php7.3 | Feb 18, 2020 | Feb 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub