In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-embeddedUpgrade libzipUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-odbcUpgrade php-soapUpgrade php-pecl-zipUpgrade php-commonUpgrade php-intlUpgrade php-dbaUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade phpUpgrade php-pgsqlUpgrade libzip-toolsUpgrade php-dbgUpgrade php-ffiUpgrade php-mbstringUpgrade php-jsonUpgrade php-mysqlndUpgrade php-fpmUpgrade php-pdoUpgrade php-cliUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-pearUpgrade php-develUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3Upgrade libzip-develUpgrade php-opcacheUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-gmpUpgrade php-process | Oct 23, 2023 | Feb 16, 2023 |
| Alpine Linux | — | Upgrade php7Upgrade php81Upgrade php8Upgrade php82 | Aug 22, 2024 | Feb 16, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-intlUpgrade php-embeddedUpgrade php-sodiumUpgrade php-dbaUpgrade php-cliUpgrade phpUpgrade php-bcmathUpgrade php-dbgUpgrade php-opcacheUpgrade php-xmlUpgrade php-gdUpgrade php-enchantUpgrade php-mysqlndUpgrade php-ldapUpgrade php-snmpUpgrade php-recodeUpgrade php-pspellUpgrade php-debuginfoUpgrade php-fpmUpgrade php-mbstringUpgrade php-develUpgrade php-pgsqlUpgrade php-odbcUpgrade php-soapUpgrade php-gmpUpgrade php-processUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pdo | Sep 21, 2023 | Feb 16, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.1-soapUpgrade php8.1-common-debuginfoUpgrade php8.1-develUpgrade php8.1-gmpUpgrade php8.1-mbstringUpgrade php8.1-embeddedUpgrade php8.1-cli-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-pdoUpgrade php8.1-xml-debuginfoUpgrade php8.1-fpmUpgrade php8.1-fpm-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-xmlUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-pgsqlUpgrade php8.1-ldapUpgrade php8.1-opcacheUpgrade php8.1-processUpgrade php8.1-dbgUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-tidyUpgrade php8.1-ffi-debuginfoUpgrade php8.1-dbaUpgrade php8.1-gd-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-cliUpgrade php8.1-debugsourceUpgrade php8.1-intlUpgrade php8.1Upgrade php8.1-embedded-debuginfoUpgrade php8.1-commonUpgrade php8.1-process-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-ffiUpgrade php8.1-gdUpgrade php8.1-enchantUpgrade php8.1-bcmathUpgrade php8.1-odbcUpgrade php8.1-opcache-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-ldap-debuginfo | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade php-snmpUpgrade php-commonUpgrade phpUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-develUpgrade php-ffiUpgrade php-intlUpgrade php-intl-debuginfoUpgrade php-cliUpgrade php-pecl-rrd-debugsourceUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-common-debuginfoUpgrade php-ldapUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-processUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gmpUpgrade php-pearUpgrade php-dbg-debuginfoUpgrade php-enchantUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-pecl-xdebug3-debugsourceUpgrade php-develUpgrade php-soapUpgrade php-fpmUpgrade php-gmp-debuginfoUpgrade php-pecl-rrdUpgrade php-ffi-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-rrd-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-bcmathUpgrade php-pgsql | Nov 1, 2023 | Feb 16, 2023 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Feb 27, 2023 | Feb 16, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 24, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Feb 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-gdUpgrade php-pdoUpgrade php-odbcUpgrade php-soapUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-commonUpgrade php-cliUpgrade php-processUpgrade php-xmlUpgrade phpUpgrade php-ldapUpgrade php-recode | Jun 9, 2023 | Feb 16, 2023 |
| Oracle_linux | — | Upgrade php-pearUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-pecl-apcuUpgrade libzipUpgrade php-commonUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-odbcUpgrade php-dbgUpgrade php-jsonUpgrade php-enchantUpgrade php-xmlUpgrade php-gmpUpgrade php-bcmathUpgrade php-pdoUpgrade php-pecl-xdebug3Upgrade libzip-toolsUpgrade libzip-develUpgrade php-cliUpgrade php-mysqlndUpgrade php-ffiUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-snmpUpgrade apcu-panelUpgrade php-opcacheUpgrade phpUpgrade php-processUpgrade php-pgsqlUpgrade php-dbaUpgrade php-intlUpgrade php-mbstring | Oct 23, 2023 | Feb 15, 2023 |
| Php | — | Upgrade to PHP version 8.2.3Upgrade to PHP version 8.0.28Upgrade to PHP version 8.1.16 | Feb 27, 2023 | Feb 16, 2023 |
| Redhat_linux | — | Upgrade php-dbaUpgrade php-cli-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade apcu-panelUpgrade php-pgsql-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-intlUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-ffiUpgrade php-intl-debuginfoUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-snmpUpgrade php-commonUpgrade php-processUpgrade php-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade phpUpgrade php-opcache-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-json-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-pdoUpgrade php-pecl-xdebug3Upgrade php-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-mbstringUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-pecl-zipUpgrade php-develUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade php-gdUpgrade php-fpmUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-xmlrpcUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebugUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade php-dba-debuginfoUpgrade php-pecl-apcuUpgrade libzipUpgrade php-soapUpgrade php-pecl-xdebug3-debuginfoNo solution existsUpgrade php-bcmathUpgrade php-odbcUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug3-debugsourceUpgrade php-enchantUpgrade php-ffi-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gmp | Nov 1, 2023 | Feb 16, 2023 |
| Rocky_linux | — | Upgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-toolsUpgrade php-ffiUpgrade php-gmp-debuginfoUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade phpUpgrade php-opcache-debuginfoUpgrade php-intlUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-debuginfoUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-xml-debuginfoUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade php-enchantUpgrade php-soap-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-dbaUpgrade php-develUpgrade php-common-debuginfoUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-xmlrpc-debuginfoUpgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-fpmUpgrade php-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade libzipUpgrade php-pdoUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-ffi-debuginfoUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-commonUpgrade libzip-develUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-cliUpgrade php-pecl-zipUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade php-xmlUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-json | Mar 5, 2024 | Feb 16, 2023 |
| Suse | — | Upgrade php8-mbstringUpgrade php8-mysqlUpgrade php74-soapUpgrade php8-fastcgiUpgrade php7-ftpUpgrade php74-calendarUpgrade php7-firebirdUpgrade php74-zlibUpgrade php74-xmlreaderUpgrade php74-xmlwriterUpgrade php7-bz2Upgrade php8-xmlwriterUpgrade php74-pharUpgrade php74-ldapUpgrade php8-ftpUpgrade php8-sysvmsgUpgrade php7-cliUpgrade php8-iconvUpgrade php8-tokenizerUpgrade php8-dbaUpgrade apache2-mod_php74Upgrade php7-pgsqlUpgrade php7-sysvmsgUpgrade php74-snmpUpgrade php8-zlibUpgrade php7-jsonUpgrade php7-sodiumUpgrade php8-develUpgrade php7-xmlrpcUpgrade php7-tidyUpgrade php74-readlineUpgrade php8-fileinfoUpgrade php7-gettextUpgrade php8-posixUpgrade php7-domUpgrade php8-pharUpgrade php7-embedUpgrade php74-zipUpgrade php8-fpmUpgrade php8-opensslUpgrade php7-pcntlUpgrade php74-exifUpgrade php7-xmlwriterUpgrade php7-mbstringUpgrade php74Upgrade php74-domUpgrade php74-xslUpgrade php7-pdoUpgrade php7-curlUpgrade php74-gettextUpgrade php7-gdUpgrade php74-bz2Upgrade php7-fpmUpgrade php7-gmpUpgrade php74-mysqlUpgrade php8-pcntlUpgrade apache2-mod_php7Upgrade php74-sysvmsgUpgrade php74-dbaUpgrade php8-snmpUpgrade php74-jsonUpgrade php8-soapUpgrade php74-ftpUpgrade php7-soapUpgrade php74-opcacheUpgrade php7-iconvUpgrade php8-tidyUpgrade php7-xmlreaderUpgrade php7-exifUpgrade php74-ctypeUpgrade php74-gmpUpgrade php7-posixUpgrade php74-opensslUpgrade php7-opensslUpgrade php8-xmlreaderUpgrade php8-odbcUpgrade php8-xslUpgrade php7Upgrade php7-xslUpgrade php74-xmlrpcUpgrade php7-intlUpgrade php74-pgsqlUpgrade php8-cliUpgrade php74-sysvsemUpgrade php74-sqliteUpgrade php7-dbaUpgrade php8-opcacheUpgrade php7-fileinfoUpgrade php74-fpmUpgrade php8-gmpUpgrade php8-sysvshmUpgrade php8-embedUpgrade php8-sysvsemUpgrade php74-tidyUpgrade php74-enchantUpgrade php7-bcmathUpgrade php7-pearUpgrade php7-fastcgiUpgrade php74-odbcUpgrade php7-opcacheUpgrade php7-enchantUpgrade php8-pgsqlUpgrade php8-gettextUpgrade php8-bz2Upgrade php7-socketsUpgrade php7-wddxUpgrade php8-socketsUpgrade php74-posixUpgrade php74-iconvUpgrade php7-zlibUpgrade php74-develUpgrade php7-develUpgrade php7-readlineUpgrade php8-zipUpgrade php8-sodiumUpgrade php74-pcntlUpgrade php7-ctypeUpgrade php74-intlUpgrade php7-sysvsemUpgrade php7-pharUpgrade php7-odbcUpgrade php74-tokenizerUpgrade php74-socketsUpgrade php8-shmopUpgrade apache2-mod_php8Upgrade php74-sysvshmUpgrade php7-testUpgrade php8-enchantUpgrade php8-ctypeUpgrade php8-domUpgrade php8-bcmathUpgrade php74-bcmathUpgrade php7-zipUpgrade php7-shmopUpgrade php8-ldapUpgrade php8-exifUpgrade php74-sodiumUpgrade php74-shmopUpgrade php7-calendarUpgrade php8-readlineUpgrade php7-mysqlUpgrade php74-fastcgiUpgrade php7-sqliteUpgrade php74-gdUpgrade php8-intlUpgrade php8-gdUpgrade php8-curlUpgrade php7-pear-archive_tarUpgrade php8-pdoUpgrade php8-testUpgrade php7-tokenizerUpgrade php8-calendarUpgrade php74-mbstringUpgrade php74-curlUpgrade php7-sysvshmUpgrade php74-fileinfoUpgrade php8-sqliteUpgrade php74-pdoUpgrade php7-snmpUpgrade php7-ldapUpgrade php8 | Feb 23, 2023 | Feb 16, 2023 |
| Ubuntu | — | Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php8.1-fpmUpgrade php7.4-cgiUpgrade php7.4Upgrade php8.1-cgiUpgrade php7.2-cliUpgrade php7.2Upgrade php7.2-fpmUpgrade php7.0-zip (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php8.1-cliUpgrade php7.2-cgiUpgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php7.4-cliUpgrade libapache2-mod-php8.1Upgrade php7.4-fpmUpgrade php7.0-cli (Ubuntu Pro)Upgrade php8.1Upgrade php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php7.0 (Ubuntu Pro) | Mar 22, 2023 | Feb 16, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub