In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-soapUpgrade php-opcacheUpgrade php-cliUpgrade libzip-develUpgrade php-ffiUpgrade php-snmpUpgrade php-processUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-gdUpgrade apcu-panelUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-intlUpgrade php-ldapUpgrade php-commonUpgrade php-gmpUpgrade php-pearUpgrade php-dbgUpgrade php-pdoUpgrade libzipUpgrade php-xmlUpgrade php-develUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-enchantUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-odbcUpgrade php-jsonUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php | May 13, 2022 | Oct 25, 2021 |
| Alpine Linux | — | Upgrade php81Upgrade php7Upgrade php8 | Aug 22, 2024 | Oct 25, 2021 |
| Centos_linux | — | Upgrade php-common-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-opcache-debuginfoUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-pecl-rrd-debugsourceUpgrade php-pdoUpgrade php-cliUpgrade php-pecl-apcu-debuginfoUpgrade php-snmpUpgrade php-pearUpgrade php-fpmUpgrade php-embeddedUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebugUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-enchantUpgrade php-intl-debuginfoUpgrade php-develUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstringUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-ldapUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade php-commonUpgrade libzip-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-dbaUpgrade php-pecl-xdebug-debugsourceUpgrade php-soapUpgrade php-ffi-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debuginfoUpgrade php-jsonUpgrade php-process-debuginfoUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade apcu-panelUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade php-ffiUpgrade libzip-tools-debuginfoUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade phpUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-ldap-debuginfo | May 13, 2022 | Oct 25, 2021 |
| Debian | — | Upgrade php7.4 | Nov 29, 2021 | Oct 25, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Sep 30, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-soapUpgrade php-pdoUpgrade php-xmlUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-gdUpgrade php-recodeUpgrade php-ldapUpgrade phpUpgrade php-processUpgrade php-odbcUpgrade php-commonUpgrade php-cli | Dec 28, 2021 | Oct 25, 2021 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.25-11.4.40.0.1.107.1 on Solaris 11.4Upgrade web/php-73 to version 7.3.32-11.4.40.0.1.107.2 on Solaris 11.4Upgrade web/php-80 to version 8.0.12-11.4.40.0.1.107.1 on Solaris 11.4 | Dec 13, 2021 | Oct 25, 2021 |
| Oracle_linux | — | Upgrade php-gmpUpgrade php-jsonUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-soapUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-dbaUpgrade php-develUpgrade php-pearUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-ldapUpgrade php-pdoUpgrade libzipUpgrade php-dbgUpgrade php-snmpUpgrade php-commonUpgrade php-odbcUpgrade php-mbstringUpgrade php-processUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-ffiUpgrade php-cliUpgrade libzip-develUpgrade php-mysqlndUpgrade php-xmlUpgrade libzip-toolsUpgrade apcu-panelUpgrade phpUpgrade php-opcache | May 18, 2022 | Oct 20, 2021 |
| Php | — | Upgrade to PHP version 8.0.11Upgrade to PHP version 7.4.24Upgrade to PHP version 7.3.31 | Nov 30, 2021 | Oct 25, 2021 |
| Redhat_linux | — | Upgrade php-process-debuginfoUpgrade php-odbc-debuginfoUpgrade php-soap-debuginfoUpgrade php-develUpgrade php-pearUpgrade php-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-pdo-debuginfoUpgrade php-common-debuginfoNo solution existsUpgrade php-dba-debuginfoUpgrade php-ldap-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-snmp-debuginfoUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-mbstringUpgrade php-fpmUpgrade php-cli-debuginfoUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebugUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-ldapUpgrade php-jsonUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-snmpUpgrade php-processUpgrade php-embedded-debuginfoUpgrade php-bcmathUpgrade php-opcacheUpgrade php-enchantUpgrade php-ffiUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zipUpgrade php-cliUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-gmpUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-pdoUpgrade php-pecl-apcu-debugsourceUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-mysqlndUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-gd-debuginfoUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-enchant-debuginfoUpgrade php-xmlUpgrade libzip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-embeddedUpgrade php-soapUpgrade php-ffi-debuginfoUpgrade apcu-panel | May 13, 2022 | Oct 25, 2021 |
| Rocky_linux | — | Upgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-dbgUpgrade php-dba-debuginfoUpgrade php-pdoUpgrade phpUpgrade php-ldapUpgrade libzipUpgrade php-ffiUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-embedded-debuginfoUpgrade php-odbcUpgrade libzip-toolsUpgrade php-ffi-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-develUpgrade php-gd-debuginfoUpgrade php-intlUpgrade php-commonUpgrade php-pecl-rrd-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-soap-debuginfoUpgrade php-opcacheUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-gdUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-cliUpgrade php-enchantUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade libzip-debugsource | Mar 5, 2024 | Oct 25, 2021 |
| Suse | — | Upgrade php72-wddxUpgrade php74-intlUpgrade php72-tidyUpgrade php74-curlUpgrade php8-gettextUpgrade php8-shmopUpgrade php74-odbcUpgrade php72-pear-archive_tarUpgrade php72-opcacheUpgrade php8-embedUpgrade php74-tidyUpgrade php72-enchantUpgrade php7-testUpgrade php72-tokenizerUpgrade php72-ctypeUpgrade php7-opcacheUpgrade php72-xslUpgrade php74-soapUpgrade php7-zipUpgrade php8-sodiumUpgrade php8-bz2Upgrade php72-ftpUpgrade php72-gdUpgrade php74-enchantUpgrade php7-sodiumUpgrade php7-sysvshmUpgrade php74-fileinfoUpgrade php72-mbstringUpgrade php7-fastcgiUpgrade php8-opcacheUpgrade php8-enchantUpgrade php7-firebirdUpgrade php74-iconvUpgrade php8-calendarUpgrade php72-pharUpgrade php8-zipUpgrade php7-zlibUpgrade php72-gettextUpgrade php7-enchantUpgrade php74-bcmathUpgrade php74-pcntlUpgrade php8-testUpgrade php7-develUpgrade php8-sysvmsgUpgrade php8-soapUpgrade php74-sysvshmUpgrade php8-exifUpgrade php72-domUpgrade php72-intlUpgrade php8-ldapUpgrade apache2-mod_php72Upgrade php8-readlineUpgrade php72-soapUpgrade php7-calendarUpgrade php72-jsonUpgrade php74-develUpgrade php72-pcntlUpgrade php8-bcmathUpgrade php7-shmopUpgrade php74Upgrade php8-intlUpgrade php7-pear-archive_tarUpgrade php74-gdUpgrade php7-mysqlUpgrade php7-sysvsemUpgrade php7-dbaUpgrade php7-fileinfoUpgrade apache2-mod_php74Upgrade php74-pdoUpgrade php8-sysvshmUpgrade php8-develUpgrade php8-socketsUpgrade php74-snmpUpgrade php8-cliUpgrade php7-ctypeUpgrade php72-calendarUpgrade php72-pearUpgrade php7-ldapUpgrade php74-mbstringUpgrade php72-iconvUpgrade php74-sqliteUpgrade php72-imapUpgrade php72-develUpgrade php7-odbcUpgrade php72-gmpUpgrade php8-pdoUpgrade php7-xmlwriterUpgrade php8-domUpgrade php74-sodiumUpgrade php72-opensslUpgrade php7-pearUpgrade php8-gdUpgrade php74-socketsUpgrade php72-ldapUpgrade php72-posixUpgrade php72-dbaUpgrade php8-ctypeUpgrade php7-socketsUpgrade php74-fpmUpgrade php72-fileinfoUpgrade php7-bcmathUpgrade apache2-mod_php8Upgrade php74-sysvmsgUpgrade php7-curlUpgrade php74-tokenizerUpgrade php7-snmpUpgrade php7-wddxUpgrade php72-sysvsemUpgrade php74-fastcgiUpgrade php8-tidyUpgrade php7-exifUpgrade php72-shmopUpgrade php7-tidyUpgrade php8-odbcUpgrade php7-mbstringUpgrade php8-pgsqlUpgrade php7-domUpgrade php74-readlineUpgrade php74-pharUpgrade apache2-mod_php7Upgrade php72-fpmUpgrade php7-embedUpgrade php72-pgsqlUpgrade php72-sysvmsgUpgrade php74-mysqlUpgrade php72-sqliteUpgrade php8-snmpUpgrade php72-snmpUpgrade php7-tokenizerUpgrade php72-fastcgiUpgrade php74-ftpUpgrade php7-iconvUpgrade php72-pdoUpgrade php7-fpmUpgrade php8-mysqlUpgrade php72-bz2Upgrade php72-exifUpgrade php74-sysvsemUpgrade php7-pgsqlUpgrade php74-bz2Upgrade php74-xslUpgrade php74-opcacheUpgrade php72Upgrade php8-sysvsemUpgrade php7-gettextUpgrade php8-xmlreaderUpgrade php74-opensslUpgrade php72-mysqlUpgrade php7-opensslUpgrade php8-tokenizerUpgrade php74-gettextUpgrade php74-pgsqlUpgrade php8-curlUpgrade php74-gmpUpgrade php74-exifUpgrade php72-xmlreaderUpgrade php72-zipUpgrade php7-pcntlUpgrade php72-bcmathUpgrade php72-readlineUpgrade php8-ftpUpgrade php74-domUpgrade php72-xmlrpcUpgrade php74-xmlreaderUpgrade php74-xmlrpcUpgrade php74-calendarUpgrade php8-gmpUpgrade php72-socketsUpgrade php72-odbcUpgrade php7-xmlrpcUpgrade php72-pspellUpgrade php7-pdoUpgrade php7-soapUpgrade php7-gmpUpgrade php72-xmlwriterUpgrade php8-zlibUpgrade php8-sqliteUpgrade php72-zlibUpgrade php8-dbaUpgrade php74-zipUpgrade php74-ctypeUpgrade php72-sodiumUpgrade php7-gdUpgrade php8-pcntlUpgrade php8-fpmUpgrade php74-xmlwriterUpgrade php8-mbstringUpgrade php7-posixUpgrade php74-dbaUpgrade php8-posixUpgrade php74-shmopUpgrade php74-ldapUpgrade php8-iconvUpgrade php7-sqliteUpgrade php7-pharUpgrade php74-posixUpgrade php7-readlineUpgrade php7-jsonUpgrade php7-ftpUpgrade php7-bz2Upgrade php7-cliUpgrade php8-fastcgiUpgrade php8-opensslUpgrade php7-xmlreaderUpgrade php72-sysvshmUpgrade php8-pharUpgrade php72-curlUpgrade php8-xslUpgrade php7-intlUpgrade php8Upgrade php74-zlibUpgrade php7-sysvmsgUpgrade php7-xslUpgrade php74-jsonUpgrade php8-xmlwriterUpgrade php7Upgrade php8-fileinfo | Nov 19, 2021 | Oct 25, 2021 |
| Ubuntu | — | Upgrade php7.4-fpmUpgrade php8.0-fpmUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php7.0-fpm (Ubuntu Pro) | Oct 28, 2021 | Oct 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub