In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzipUpgrade phpUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-odbcUpgrade php-dbaUpgrade libzip-toolsUpgrade php-gmpUpgrade php-processUpgrade php-pecl-zipUpgrade php-gdUpgrade php-enchantUpgrade apcu-panelUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-intlUpgrade php-pecl-xdebugUpgrade libzip-develUpgrade php-commonUpgrade php-cliUpgrade php-ldapUpgrade php-pearUpgrade php-snmpUpgrade php-recodeUpgrade php-mysqlndUpgrade php-develUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-dbgUpgrade php-opcacheUpgrade php-xmlUpgrade php-fpmUpgrade php-mbstringUpgrade php-pdoUpgrade php-embedded | May 4, 2022 | Apr 1, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 1, 2020 |
| Amazon_linux | — | Upgrade php73 | May 15, 2020 | Apr 1, 2020 |
| Centos_linux | — | Upgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-gdUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade php-soapUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-mysqlndUpgrade php-pecl-rrd-debugsourceUpgrade php-pdoUpgrade php-pdo-debuginfoUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-recodeUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-recode-debuginfoUpgrade php-opcacheUpgrade php-dbaUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-toolsUpgrade libzipUpgrade php-pearUpgrade php-pecl-zipUpgrade phpUpgrade php-debugsourceUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrd-debuginfoUpgrade php-jsonUpgrade php-cliUpgrade php-bcmath-debuginfoUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-ldapUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pgsqlUpgrade php-json-debuginfoUpgrade php-gmp-debuginfoUpgrade php-debuginfoUpgrade php-fpmUpgrade php-common-debuginfoUpgrade php-odbc-debuginfoUpgrade php-odbcUpgrade apcu-panelUpgrade php-xml-debuginfoUpgrade php-intlUpgrade php-snmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-bcmathUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-develUpgrade php-xmlUpgrade php-develUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-commonUpgrade php-mysqlnd-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfo | Sep 9, 2020 | Apr 1, 2020 |
| Debian | — | Upgrade php7.4 | Jul 8, 2020 | Apr 1, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Mar 26, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.17-11.4.22.0.1.69.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.5-11.4.22.0.1.69.2 on Solaris 11.4 | Jan 19, 2021 | Apr 1, 2020 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-soapUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-gdUpgrade php-intlUpgrade libzip-develUpgrade php-develUpgrade php-ldapUpgrade php-xmlUpgrade php-jsonUpgrade php-enchantUpgrade php-fpmUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-bcmathUpgrade php-recodeUpgrade phpUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-cliUpgrade php-odbcUpgrade php-snmpUpgrade php-embeddedUpgrade php-pear | Sep 10, 2020 | Apr 1, 2020 |
| Php | — | Upgrade to PHP version 7.4.4Upgrade to PHP version 7.3.16 | Apr 6, 2020 | Apr 1, 2020 |
| Redhat_linux | — | Upgrade php-snmpUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-pdoUpgrade php-json-debuginfoUpgrade php-pecl-xdebugUpgrade php-gd-debuginfoUpgrade php-recodeUpgrade php-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-debugsourceUpgrade php-dbgUpgrade php-odbcUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-gmpUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzipUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade libzip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-common-debuginfoUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-ldapUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-pearUpgrade php-recode-debuginfoUpgrade phpUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcuUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-pgsqlUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-soapUpgrade php-bcmath-debuginfoUpgrade php-xmlrpcUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-gdUpgrade php-pecl-rrd | Sep 9, 2020 | Apr 1, 2020 |
| Rocky_linux | — | Upgrade php-intlUpgrade php-xmlUpgrade php-mysqlndUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-dbgUpgrade php-snmp-debuginfoUpgrade php-embeddedUpgrade php-opcacheUpgrade php-recode-debuginfoUpgrade php-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-rrdUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-snmpUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-recodeUpgrade php-pecl-rrd-debugsourceUpgrade php-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade libzip-toolsUpgrade phpUpgrade php-commonUpgrade php-processUpgrade php-pecl-apcu-debugsourceUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-enchantUpgrade php-pecl-xdebug-debugsourceUpgrade php-json-debuginfoUpgrade php-xmlrpcUpgrade php-xmlrpc-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-jsonUpgrade libzipUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade libzip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-rrd-debuginfoUpgrade php-gdUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmathUpgrade php-pecl-zipUpgrade libzip-debugsourceUpgrade php-odbcUpgrade php-pdoUpgrade php-pdo-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade php-soapUpgrade php-mbstringUpgrade php-dbaUpgrade php-gd-debuginfo | Mar 12, 2024 | Apr 1, 2020 |
| Ubuntu | — | Upgrade php7.4-fpmUpgrade php7.3-cliUpgrade php7.4-cgiUpgrade php7.3-cgiUpgrade php7.3-fpmUpgrade libapache2-mod-php7.3Upgrade php7.4-mbstringUpgrade libapache2-mod-php7.4Upgrade php7.4-cliUpgrade php7.3-mbstring | Apr 16, 2020 | Apr 1, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub