In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-xmlUpgrade php-snmpUpgrade apcu-panelUpgrade php-cliUpgrade php-ffiUpgrade libzip-develUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-processUpgrade php-opcacheUpgrade php-commonUpgrade php-intlUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3Upgrade php-pearUpgrade php-gdUpgrade php-fpmUpgrade php-jsonUpgrade php-gmpUpgrade php-dbaUpgrade php-pdoUpgrade php-enchantUpgrade phpUpgrade php-develUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-dbgUpgrade php-pgsqlUpgrade php-soapUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-bcmathUpgrade php-pecl-apcu | Oct 23, 2023 | Aug 11, 2023 |
| Alpine Linux | — | Upgrade php8Upgrade php81 | Aug 22, 2024 | Aug 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-odbcUpgrade phpUpgrade php-dbaUpgrade php-embeddedUpgrade php-dbgUpgrade php-commonUpgrade php-sodiumUpgrade php-intlUpgrade php-ldapUpgrade php-opcacheUpgrade php-bcmathUpgrade php-debuginfoUpgrade php-pgsqlUpgrade php-soapUpgrade php-develUpgrade php-recodeUpgrade php-xmlUpgrade php-processUpgrade php-enchantUpgrade php-cliUpgrade php-gmpUpgrade php-gdUpgrade php-snmpUpgrade php-mysqlndUpgrade php-pspellUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-fpmUpgrade php-mbstring | Sep 14, 2023 | Aug 11, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.2-mysqlndUpgrade php8.2-cli-debuginfoUpgrade php8.2-processUpgrade php8.1-snmpUpgrade php8.1-dbgUpgrade php8.1-embedded-debuginfoUpgrade php8.2-xml-debuginfoUpgrade php8.1-ffiUpgrade php8.2-pspellUpgrade php8.2Upgrade php8.1-ldapUpgrade php8.2-cliUpgrade php8.1-processUpgrade php8.2-snmpUpgrade php8.2-intl-debuginfoUpgrade php8.1-cliUpgrade php8.2-dbaUpgrade php8.2-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.2-odbcUpgrade php8.1-fpm-debuginfoUpgrade php8.1-odbcUpgrade php8.1-xml-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-enchantUpgrade php8.1-dbaUpgrade php8.1-ldap-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-tidyUpgrade php8.1-xmlUpgrade php8.2-ffiUpgrade php8.2-opcache-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-fpmUpgrade php8.2-ldapUpgrade php8.1-gmpUpgrade php8.1-soapUpgrade php8.2-ffi-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.2-gdUpgrade php8.1-dba-debuginfoUpgrade php8.1-process-debuginfoUpgrade php8.1-pgsqlUpgrade php8.2-snmp-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.2-process-debuginfoUpgrade php8.1-commonUpgrade php8.2-pgsql-debuginfoUpgrade php8.2-bcmathUpgrade php8.1-common-debuginfoUpgrade php8.1-pspell-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-pdoUpgrade php8.2-xmlUpgrade php8.2-dbg-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.2-intlUpgrade php8.2-mbstringUpgrade php8.2-opcacheUpgrade php8.1-tidy-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-gd-debuginfoUpgrade php8.2-fpmUpgrade php8.2-enchantUpgrade php8.1-gdUpgrade php8.2-pdo-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-snmp-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-mbstringUpgrade php8.1-develUpgrade php8.2-soapUpgrade php8.2-debugsourceUpgrade php8.2-gmp-debuginfoUpgrade php8.2-pspell-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-intlUpgrade php8.1-debugsourceUpgrade php8.1-cli-debuginfoUpgrade php8.2-pdoUpgrade php8.2-embeddedUpgrade php8.2-tidyUpgrade php8.2-pgsqlUpgrade php8.2-dbgUpgrade php8.1-opcache-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1Upgrade php8.2-common-debuginfoUpgrade php8.1-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-gmpUpgrade php8.1-bcmathUpgrade php8.2-soap-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.1-pspellUpgrade php8.2-develUpgrade php8.2-common | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade php-process-debuginfoUpgrade php-ffiUpgrade php-intlUpgrade php-pgsqlUpgrade apcu-panelUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-mbstring-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug3-debugsourceUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-pecl-apcu-develUpgrade php-gd-debuginfoUpgrade libzipUpgrade php-pecl-apcuUpgrade php-cli-debuginfoUpgrade php-ffi-debuginfoUpgrade php-soapUpgrade php-ldapUpgrade libzip-tools-debuginfoUpgrade php-common-debuginfoUpgrade php-pdo-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gmp-debuginfoUpgrade php-bcmathUpgrade php-pecl-zip-debugsourceUpgrade php-opcacheUpgrade php-gdUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-gmpUpgrade php-embeddedUpgrade php-mysqlnd-debuginfoUpgrade php-pearUpgrade php-pecl-apcu-debuginfoUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-pdoUpgrade php-enchantUpgrade php-cliUpgrade php-snmpUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-debugsourceUpgrade php-dbg-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug3Upgrade php-embedded-debuginfoUpgrade php-develUpgrade libzip-develUpgrade php-pecl-rrd-debuginfoUpgrade php-fpmUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-ldap-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfo | Nov 1, 2023 | Aug 11, 2023 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Sep 7, 2023 | Aug 11, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Aug 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pdoUpgrade php-soapUpgrade php-gdUpgrade php-odbcUpgrade php-processUpgrade phpUpgrade php-xmlUpgrade php-cliUpgrade php-ldapUpgrade php-commonUpgrade php-recodeUpgrade php-fpmUpgrade php-xmlrpc | Jan 10, 2024 | Aug 11, 2023 |
| Oracle_linux | — | Upgrade php-commonUpgrade php-odbcUpgrade php-ffiUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-snmpUpgrade php-dbaUpgrade php-mbstringUpgrade php-xmlUpgrade php-processUpgrade php-cliUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade libzip-develUpgrade php-dbgUpgrade php-opcacheUpgrade php-intlUpgrade php-pecl-zipUpgrade phpUpgrade php-jsonUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-embeddedUpgrade php-ldapUpgrade php-fpmUpgrade apcu-panelUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-gmpUpgrade php-bcmathUpgrade libzipUpgrade php-gdUpgrade php-pdoUpgrade php-pecl-xdebug3Upgrade php-pecl-apcu | Oct 23, 2023 | Aug 3, 2023 |
| Php | — | Upgrade to PHP version 8.1.22Upgrade to PHP version 8.0.30Upgrade to PHP version 8.2.8 | Aug 23, 2023 | Aug 11, 2023 |
| Redhat_linux | — | Upgrade php-xml-debuginfoUpgrade php-ffiUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mbstringUpgrade phpUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-fpm-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-enchantUpgrade php-gdUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-intl-debuginfoUpgrade php-cli-debuginfoUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-intlUpgrade php-processUpgrade libzip-tools-debuginfoUpgrade php-pgsqlUpgrade php-soap-debuginfoUpgrade apcu-panelUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade php-debugsourceUpgrade php-gmpUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-pecl-zipUpgrade libzipUpgrade php-pecl-xdebug3-debugsourceUpgrade php-soapUpgrade php-snmpUpgrade php-develUpgrade php-ffi-debuginfoUpgrade php-mysqlndUpgrade php-pearUpgrade php-pecl-xdebug3Upgrade php-odbcUpgrade php-xmlUpgrade libzip-develUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debuginfoUpgrade php-bcmathUpgrade php-pecl-rrd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade php-cliUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-ldapUpgrade php-fpmUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-dbgUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdoUpgrade php-common | Nov 1, 2023 | Aug 11, 2023 |
| Rocky_linux | — | Upgrade php-mbstringUpgrade php-pecl-xdebug3Upgrade php-cliUpgrade php-fpmUpgrade php-develUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade php-pecl-rrdUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-processUpgrade php-pdoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-snmpUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ffiUpgrade php-pdo-debuginfoUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade libzipUpgrade libzip-toolsUpgrade libzip-develUpgrade php-pgsqlUpgrade php-intlUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-fpm-debuginfoUpgrade php-opcacheUpgrade php-odbcUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade phpUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcuUpgrade php-process-debuginfoUpgrade php-soapUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gmp-debuginfoUpgrade php-ffi-debuginfoUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-bcmathUpgrade php-odbc-debuginfoUpgrade php-dbaUpgrade php-xml-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmath-debuginfo | Mar 5, 2024 | Aug 11, 2023 |
| Suse | — | Upgrade php8-zlibUpgrade php7-firebirdUpgrade php7-opcacheUpgrade php8-cliUpgrade php8-enchantUpgrade php8-zipUpgrade php8-bz2Upgrade php7-jsonUpgrade php74-odbcUpgrade php7-xmlrpcUpgrade php7-xslUpgrade php8-gdUpgrade php74Upgrade php7-gmpUpgrade php74-intlUpgrade php7-fileinfoUpgrade apache2-mod_php74Upgrade php8-xmlwriterUpgrade php8-gettextUpgrade php74-zlibUpgrade php74-iconvUpgrade php74-sysvshmUpgrade php74-sodiumUpgrade php8-ctypeUpgrade php7-odbcUpgrade php8-mysqlUpgrade php74-soapUpgrade php7-calendarUpgrade php74-pcntlUpgrade php74-posixUpgrade php8-sysvsemUpgrade php7-opensslUpgrade php74-xmlreaderUpgrade php8-exifUpgrade php8-mbstringUpgrade php74-fileinfoUpgrade php8-pgsqlUpgrade php74-enchantUpgrade php7-ldapUpgrade php7-sysvshmUpgrade php7-ctypeUpgrade php7-fastcgiUpgrade php8-bcmathUpgrade php7-testUpgrade php74-gmpUpgrade php8-opcacheUpgrade php8-calendarUpgrade php8-intlUpgrade php7-dbaUpgrade php7-pcntlUpgrade php7-sodiumUpgrade php8-xslUpgrade php7-zipUpgrade php8-sysvmsgUpgrade php7-readlineUpgrade php74-curlUpgrade php74-ldapUpgrade php74-domUpgrade php8-develUpgrade php8-pdoUpgrade php8-shmopUpgrade php8-socketsUpgrade php8-testUpgrade php8-soapUpgrade php7-mysqlUpgrade php74-bcmathUpgrade php8-opensslUpgrade apache2-mod_php8Upgrade php74-tidyUpgrade php7-pgsqlUpgrade php74-develUpgrade php74-calendarUpgrade php7-xmlwriterUpgrade php8-ldapUpgrade php74-gettextUpgrade php7-sysvmsgUpgrade php7-ftpUpgrade php7-posixUpgrade php7-tidyUpgrade php7-fpmUpgrade php74-socketsUpgrade php8-gmpUpgrade php8-dbaUpgrade php8Upgrade php74-opcacheUpgrade php74-mysqlUpgrade php7-intlUpgrade php7-gettextUpgrade php7-bz2Upgrade php8-odbcUpgrade php74-sqliteUpgrade php7-pharUpgrade php8-tokenizerUpgrade php74-sysvmsgUpgrade php8-readlineUpgrade php8-pcntlUpgrade php8-fpmUpgrade php8-fileinfoUpgrade php74-exifUpgrade php7-domUpgrade php74-jsonUpgrade php7-tokenizerUpgrade php7-sysvsemUpgrade php7-snmpUpgrade php7-enchantUpgrade php7-gdUpgrade apache2-mod_php7Upgrade php8-sysvshmUpgrade php8-snmpUpgrade php8-posixUpgrade php8-embedUpgrade php8-ftpUpgrade php74-xslUpgrade php8-curlUpgrade php74-fpmUpgrade php7-xmlreaderUpgrade php7-shmopUpgrade php8-fastcgiUpgrade php8-domUpgrade php74-zipUpgrade php74-xmlrpcUpgrade php7-develUpgrade php8-sqliteUpgrade php74-tokenizerUpgrade php74-pdoUpgrade php74-ctypeUpgrade php7-zlibUpgrade php7-cliUpgrade php74-gdUpgrade php8-pharUpgrade php74-shmopUpgrade php74-snmpUpgrade php7-sqliteUpgrade php74-xmlwriterUpgrade php8-tidyUpgrade php7-exifUpgrade php74-readlineUpgrade php7-pdoUpgrade php8-iconvUpgrade php74-sysvsemUpgrade php74-opensslUpgrade php74-pharUpgrade php7-socketsUpgrade php7-soapUpgrade php7-bcmathUpgrade php7-iconvUpgrade php7Upgrade php8-sodiumUpgrade php74-bz2Upgrade php8-xmlreaderUpgrade php7-embedUpgrade php74-mbstringUpgrade php74-dbaUpgrade php7-mbstringUpgrade php7-curlUpgrade php74-pgsqlUpgrade php74-ftpUpgrade php74-fastcgi | Aug 29, 2023 | Aug 11, 2023 |
| Ubuntu | — | Upgrade php7.2 (Ubuntu Pro)Upgrade php8.1-cliUpgrade php7.4-fpmUpgrade php7.4Upgrade php7.2-xml (Ubuntu Pro)Upgrade php8.1-fpmUpgrade libapache2-mod-php8.1Upgrade libapache2-mod-php7.2 (Ubuntu Pro)Upgrade php7.0-xml (Ubuntu Pro)Upgrade php7.4-xmlUpgrade php7.0-fpm (Ubuntu Pro)Upgrade php8.1-cgiUpgrade php7.2-cgi (Ubuntu Pro)Upgrade php7.2-cli (Ubuntu Pro)Upgrade php7.4-cliUpgrade php7.4-cgiUpgrade php7.0 (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php8.1-xmlUpgrade libapache2-mod-php7.4Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.2-fpm (Ubuntu Pro)Upgrade php8.1 | Aug 24, 2023 | Aug 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub