In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-xmlUpgrade php-fpmUpgrade php-pdoUpgrade php-cliUpgrade php-jsonUpgrade php-develUpgrade php-pecl-xdebug3Upgrade php-pecl-rrdUpgrade php-pearUpgrade php-gdUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-processUpgrade php-gmpUpgrade php-xmlrpcUpgrade phpUpgrade php-snmpUpgrade php-ldapUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-embeddedUpgrade php-enchantUpgrade libzip-toolsUpgrade php-soapUpgrade libzipUpgrade php-opcacheUpgrade php-ffiUpgrade php-commonUpgrade php-bcmathUpgrade php-dbgUpgrade php-dbaUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php-odbcUpgrade apcu-panelUpgrade php-intl | Feb 22, 2023 | Sep 28, 2022 |
| Alpine Linux | — | Upgrade php7Upgrade php8Upgrade php81 | Aug 22, 2024 | Sep 28, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-processUpgrade php-odbcUpgrade php-commonUpgrade php-pgsqlUpgrade php-debuginfoUpgrade php-fpmUpgrade php-mbstringUpgrade php-dbaUpgrade php-soapUpgrade phpUpgrade php-snmpUpgrade php-develUpgrade php-embeddedUpgrade php-gdUpgrade php-gmpUpgrade php-intlUpgrade php-dbgUpgrade php-opcacheUpgrade php-pspellUpgrade php-enchantUpgrade php-bcmathUpgrade php-sodiumUpgrade php-ldapUpgrade php-cliUpgrade php-xmlUpgrade php-mysqlndUpgrade php-pdo | Sep 14, 2023 | Sep 28, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-enchant-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-dbg-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-mbstringUpgrade php8.1-intlUpgrade php8.1-fpm-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-develUpgrade php8.1-gdUpgrade php8.1Upgrade php8.1-bcmathUpgrade php8.1-odbc-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.1-soapUpgrade php8.1-pdoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-common-debuginfoUpgrade php8.1-cliUpgrade php8.1-tidyUpgrade php8.1-odbcUpgrade php8.1-pgsqlUpgrade php8.1-dba-debuginfoUpgrade php8.1-commonUpgrade php8.1-ffiUpgrade php8.1-dbaUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-fpmUpgrade php8.1-enchantUpgrade php8.1-xml-debuginfoUpgrade php8.1-ldapUpgrade php8.1-ldap-debuginfoUpgrade php8.1-xmlUpgrade php8.1-pdo-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-dbgUpgrade php8.1-soap-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-processUpgrade php8.1-process-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-gmp | Feb 17, 2025 | Sep 29, 2022 |
| Centos_linux | — | Upgrade php-pecl-zipUpgrade php-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-ffi-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gdUpgrade php-pdoUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-dbgUpgrade php-pecl-zip-debugsourceUpgrade php-jsonUpgrade php-embedded-debuginfoUpgrade php-gmpUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-gmp-debuginfoUpgrade php-bcmathUpgrade php-pdo-debuginfoUpgrade php-enchantUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-rrd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pearUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug3-debugsourceUpgrade php-fpmUpgrade php-xml-debuginfoUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-json-debuginfoUpgrade php-soapUpgrade phpUpgrade php-embeddedUpgrade php-pecl-rrd-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade libzip-develUpgrade php-opcache-debuginfoUpgrade libzip-toolsUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpm-debuginfoUpgrade php-ffiUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-opcacheUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-dbaUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-mysqlndUpgrade php-bcmath-debuginfoUpgrade php-xmlrpcUpgrade php-xmlUpgrade apcu-panelUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-mbstringUpgrade php-commonUpgrade php-soap-debuginfoUpgrade php-cli-debuginfoUpgrade php-process-debuginfo | Feb 22, 2023 | Sep 28, 2022 |
| Debian | — | Upgrade php7.4 | Nov 15, 2022 | Sep 28, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Nov 23, 2022 | Sep 28, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-xmlUpgrade php-processUpgrade phpUpgrade php-cliUpgrade php-ldapUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pdoUpgrade php-commonUpgrade php-odbcUpgrade php-gd | Feb 9, 2023 | Sep 28, 2022 |
| Oracle_linux | — | Upgrade php-jsonUpgrade php-xmlUpgrade php-develUpgrade php-pecl-zipUpgrade php-commonUpgrade php-pecl-xdebug3Upgrade phpUpgrade libzipUpgrade php-fpmUpgrade php-pdoUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-opcacheUpgrade php-embeddedUpgrade php-cliUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-ldapUpgrade php-snmpUpgrade php-mysqlndUpgrade libzip-develUpgrade php-bcmathUpgrade php-pearUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-soapUpgrade apcu-panelUpgrade php-ffiUpgrade php-xmlrpcUpgrade php-gdUpgrade php-enchantUpgrade php-dbaUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-mbstringUpgrade php-pgsql | Feb 23, 2023 | Sep 29, 2022 |
| Php | — | Upgrade to PHP version 8.0.24Upgrade to PHP version 7.4.31Upgrade to PHP version 8.1.11 | Nov 2, 2022 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade php-embedded-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debugsourceUpgrade php-soapUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpcUpgrade libzip-tools-debuginfoUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ffiUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade php-pgsqlUpgrade php-processUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-enchantUpgrade php-pdo-debuginfoUpgrade php-pecl-rrdUpgrade php-odbc-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-bcmathUpgrade php-pearUpgrade php-pecl-zip-debuginfoUpgrade php-opcacheUpgrade php-pecl-xdebug3Upgrade php-pecl-xdebug-debugsourceUpgrade php-snmpUpgrade phpUpgrade libzip-develUpgrade php-pdoUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-dbgUpgrade php-gd-debuginfoNo solution existsUpgrade php-xml-debuginfoUpgrade php-mysqlndUpgrade php-commonUpgrade php-odbcUpgrade php-xmlUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-ffi-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debuginfoUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-develUpgrade php-gmp-debuginfoUpgrade php-gmpUpgrade php-cli | Feb 22, 2023 | Sep 28, 2022 |
| Rocky_linux | — | Upgrade php-pecl-xdebug-debuginfoUpgrade php-cliUpgrade php-snmpUpgrade phpUpgrade php-common-debuginfoUpgrade php-ffi-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcu-debugsourceUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3Upgrade php-bcmathUpgrade libzip-develUpgrade php-pdoUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-odbcUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-xmlUpgrade php-pecl-rrd-debugsourceUpgrade php-fpmUpgrade php-gmp-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug3-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-zipUpgrade php-fpm-debuginfoUpgrade php-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-soapUpgrade php-pgsqlUpgrade php-enchantUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-pdo-debuginfoUpgrade php-embedded-debuginfoUpgrade php-intlUpgrade php-mysqlnd-debuginfoUpgrade php-cli-debuginfoUpgrade php-ffiUpgrade libzipUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade libzip-debugsourceUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-soap-debuginfoUpgrade php-pecl-rrdUpgrade php-odbc-debuginfo | Mar 12, 2024 | Sep 28, 2022 |
| Suse | — | Upgrade php8-iconvUpgrade php72-pearUpgrade php72Upgrade php74-soapUpgrade php7-gdUpgrade php8-cliUpgrade php72-posixUpgrade php72-sysvmsgUpgrade php7-soapUpgrade php74-calendarUpgrade php7-sodiumUpgrade php74-xmlrpcUpgrade php72-exifUpgrade php74-ftpUpgrade php72-sysvsemUpgrade php72-sysvshmUpgrade php74-xmlreaderUpgrade php7-intlUpgrade php72-domUpgrade php74-exifUpgrade php72-pdoUpgrade php7-cliUpgrade php8-develUpgrade php8-mysqlUpgrade php7-curlUpgrade php72-socketsUpgrade php8-fpmUpgrade php74-snmpUpgrade php7-exifUpgrade php72-pgsqlUpgrade php74-enchantUpgrade php8-curlUpgrade php8-tokenizerUpgrade php8-pcntlUpgrade php72-imapUpgrade php8-zlibUpgrade php8-zipUpgrade php8-socketsUpgrade php74-xmlwriterUpgrade php8-xmlwriterUpgrade php8-embedUpgrade php72-xmlwriterUpgrade php72-mbstringUpgrade php72-opcacheUpgrade php7-firebirdUpgrade php7-xmlrpcUpgrade php72-mysqlUpgrade php74-zipUpgrade php74-jsonUpgrade php7-pcntlUpgrade php72-shmopUpgrade php74-zlibUpgrade php74-opcacheUpgrade php74-gdUpgrade php72-sodiumUpgrade php7-posixUpgrade php7Upgrade php72-tokenizerUpgrade php8-dbaUpgrade php72-wddxUpgrade php8-opensslUpgrade php8-snmpUpgrade php7-bz2Upgrade php8-xmlreaderUpgrade php7-opcacheUpgrade php7-pdoUpgrade php72-gdUpgrade php7-sysvshmUpgrade php74-sysvmsgUpgrade php7-pearUpgrade php74-bcmathUpgrade php8-xslUpgrade php72-fileinfoUpgrade php72-fpmUpgrade php72-zipUpgrade php7-zipUpgrade php74-pgsqlUpgrade php7-opensslUpgrade php72-pcntlUpgrade php74-opensslUpgrade php8-fileinfoUpgrade php72-bcmathUpgrade php8-posixUpgrade php74-ctypeUpgrade php7-tidyUpgrade php74-bz2Upgrade php7-domUpgrade php8-ctypeUpgrade php74-gmpUpgrade php7-xslUpgrade php8-odbcUpgrade php8Upgrade php72-bz2Upgrade php8-ftpUpgrade php7-gettextUpgrade php72-snmpUpgrade php74-tokenizerUpgrade php8-sysvmsgUpgrade php72-xslUpgrade php74-sysvsemUpgrade php74-readlineUpgrade php8-tidyUpgrade php72-zlibUpgrade php7-gmpUpgrade php7-embedUpgrade php7-fpmUpgrade php7-xmlreaderUpgrade php72-dbaUpgrade apache2-mod_php74Upgrade php7-ldapUpgrade php7-bcmathUpgrade php72-develUpgrade php7-odbcUpgrade php72-odbcUpgrade php72-pear-archive_tarUpgrade php7-dbaUpgrade php72-calendarUpgrade php7-sysvsemUpgrade php72-readlineUpgrade php72-xmlrpcUpgrade php7-readlineUpgrade php72-soapUpgrade php7-mbstringUpgrade php7-snmpUpgrade php74-domUpgrade php7-iconvUpgrade apache2-mod_php7Upgrade php8-testUpgrade php72-sqliteUpgrade php8-readlineUpgrade php74-posixUpgrade php72-gettextUpgrade php8-ldapUpgrade php74-develUpgrade php7-develUpgrade php8-bz2Upgrade php8-intlUpgrade php74-pharUpgrade php72-curlUpgrade php72-ftpUpgrade php72-xmlreaderUpgrade php7-mysqlUpgrade php7-tokenizerUpgrade php7-ctypeUpgrade php74-pcntlUpgrade php7-wddxUpgrade php8-mbstringUpgrade php72-enchantUpgrade php74-socketsUpgrade apache2-mod_php8Upgrade php8-gmpUpgrade php8-pdoUpgrade php74-sqliteUpgrade php72-gmpUpgrade php8-pgsqlUpgrade php8-sqliteUpgrade php7-pgsqlUpgrade php72-ctypeUpgrade php74-iconvUpgrade php7-fastcgiUpgrade php74-fileinfoUpgrade php8-bcmathUpgrade php74-fpmUpgrade php74-shmopUpgrade php74-odbcUpgrade php74-mbstringUpgrade php72-ldapUpgrade php8-enchantUpgrade php74-gettextUpgrade php7-sysvmsgUpgrade php74-tidyUpgrade php7-xmlwriterUpgrade php7-sqliteUpgrade php7-socketsUpgrade php8-calendarUpgrade php72-intlUpgrade php7-shmopUpgrade php8-sysvshmUpgrade php74-ldapUpgrade php74-xslUpgrade php8-sodiumUpgrade php8-fastcgiUpgrade php74-sodiumUpgrade php74-dbaUpgrade php72-pspellUpgrade php7-testUpgrade apache2-mod_php72Upgrade php7-jsonUpgrade php8-soapUpgrade php74-fastcgiUpgrade php7-zlibUpgrade php8-opcacheUpgrade php8-exifUpgrade php7-enchantUpgrade php74-mysqlUpgrade php74-sysvshmUpgrade php72-pharUpgrade php72-fastcgiUpgrade php72-opensslUpgrade php8-sysvsemUpgrade php7-ftpUpgrade php74Upgrade php8-shmopUpgrade php8-domUpgrade php7-pear-archive_tarUpgrade php72-iconvUpgrade php8-gettextUpgrade php7-fileinfoUpgrade php8-gdUpgrade php8-pharUpgrade php74-pdoUpgrade php7-pharUpgrade php74-intlUpgrade php72-tidyUpgrade php72-jsonUpgrade php7-calendarUpgrade php74-curl | Oct 26, 2022 | Sep 28, 2022 |
| Ubuntu | — | Upgrade php8.1-cliUpgrade php7.0 (Ubuntu Pro)Upgrade php7.2-zipUpgrade libapache2-mod-php8.1Upgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade libapache2-mod-php8.0Upgrade php7.4-cliUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php8.1Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.2-cgiUpgrade libapache2-mod-php7.2Upgrade php7.0-cli (Ubuntu Pro)Upgrade php8.1-cgiUpgrade php7.2-cliUpgrade php7.4Upgrade libapache2-mod-php7.4Upgrade php8.1-zipUpgrade php7.4-cgiUpgrade php7.0-zip (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.2Upgrade php7.4-zip | Nov 9, 2022 | Sep 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub