In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-ffiUpgrade apcu-panelUpgrade php-commonUpgrade php-odbcUpgrade libzip-toolsUpgrade php-snmpUpgrade php-intlUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-opcacheUpgrade php-cliUpgrade php-xmlrpcUpgrade libzip-develUpgrade php-processUpgrade php-bcmathUpgrade php-enchantUpgrade phpUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-pdoUpgrade php-jsonUpgrade php-gmpUpgrade php-develUpgrade php-pecl-xdebug3Upgrade php-embeddedUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-ldapUpgrade php-dbaUpgrade php-fpmUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pearUpgrade libzipUpgrade php-gd | Oct 23, 2023 | Aug 11, 2023 |
| Alpine Linux | — | Upgrade php81Upgrade php8 | Aug 22, 2024 | Aug 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-xmlUpgrade php-pdoUpgrade php-processUpgrade php-recodeUpgrade php-snmpUpgrade php-develUpgrade php-cliUpgrade php-pspellUpgrade php-xmlrpcUpgrade php-gdUpgrade php-fpmUpgrade php-enchantUpgrade php-mbstringUpgrade php-gmpUpgrade php-mysqlndUpgrade php-sodiumUpgrade php-commonUpgrade php-bcmathUpgrade php-ldapUpgrade php-dbgUpgrade phpUpgrade php-intlUpgrade php-pgsqlUpgrade php-soapUpgrade php-opcacheUpgrade php-embeddedUpgrade php-dbaUpgrade php-odbcUpgrade php-debuginfo | Sep 14, 2023 | Aug 11, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.1-cliUpgrade php8.2-cliUpgrade php8.1-pgsqlUpgrade php8.2-xml-debuginfoUpgrade php8.2-pspellUpgrade php8.2Upgrade php8.1-ldap-debuginfoUpgrade php8.2-cli-debuginfoUpgrade php8.2-process-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.1-enchantUpgrade php8.1-dbgUpgrade php8.1-snmpUpgrade php8.1-xml-debuginfoUpgrade php8.1-ffiUpgrade php8.2-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.2-dbaUpgrade php8.1-xmlUpgrade php8.2-ffiUpgrade php8.1-tidyUpgrade php8.2-ldapUpgrade php8.1-odbcUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-soapUpgrade php8.2-mysqlndUpgrade php8.1-embedded-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.1-dbaUpgrade php8.1-commonUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-ffi-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-process-debuginfoUpgrade php8.2-odbcUpgrade php8.2-ffi-debuginfoUpgrade php8.2-processUpgrade php8.2-gdUpgrade php8.1-pdo-debuginfoUpgrade php8.1-ldapUpgrade php8.2-opcache-debuginfoUpgrade php8.2-pgsql-debuginfoUpgrade php8.1-fpmUpgrade php8.1-gmpUpgrade php8.1-processUpgrade php8.2-odbc-debuginfoUpgrade php8.1-pdoUpgrade php8.1-pspell-debuginfoUpgrade php8.2-bcmathUpgrade php8.1-mysqlndUpgrade php8.1-gmp-debuginfoUpgrade php8.2-snmpUpgrade php8.2-common-debuginfoUpgrade php8.2-intlUpgrade php8.2-opcacheUpgrade php8.1-gdUpgrade php8.1-intl-debuginfoUpgrade php8.2-fpmUpgrade php8.2-enchantUpgrade php8.2-pdo-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.2-mbstringUpgrade php8.1-mbstringUpgrade php8.2-soapUpgrade php8.1-snmp-debuginfoUpgrade php8.1-pspellUpgrade php8.2-develUpgrade php8.2-mbstring-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.2-commonUpgrade php8.1-develUpgrade php8.2-dbgUpgrade php8.1-opcache-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-bcmathUpgrade php8.1-bcmath-debuginfoUpgrade php8.2-tidyUpgrade php8.2-pgsqlUpgrade php8.2-pdoUpgrade php8.2-embeddedUpgrade php8.2-dbg-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.2-xmlUpgrade php8.1-mbstring-debuginfoUpgrade php8.2-pspell-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.2-debugsourceUpgrade php8.2-dba-debuginfoUpgrade php8.1-intlUpgrade php8.1-debugsourceUpgrade php8.1-cli-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.1Upgrade php8.2-gmpUpgrade php8.1-debuginfo | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade php-embeddedUpgrade php-pearUpgrade php-processUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-embedded-debuginfoUpgrade php-mysqlndUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-gmpUpgrade php-debugsourceUpgrade php-pecl-xdebug3Upgrade php-xmlUpgrade php-gdUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-fpmUpgrade libzip-develUpgrade php-pecl-rrd-debuginfoUpgrade php-cliUpgrade php-pecl-zip-debugsourceUpgrade php-snmpUpgrade php-enchantUpgrade phpUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-ffi-debuginfoUpgrade php-cli-debuginfoUpgrade libzipUpgrade php-odbcUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade php-soapUpgrade php-pecl-apcuUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-ffiUpgrade php-process-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldapUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug3-debugsource | Nov 1, 2023 | Aug 11, 2023 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Sep 7, 2023 | Aug 11, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Aug 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-soapUpgrade php-processUpgrade php-gdUpgrade php-odbcUpgrade php-pdoUpgrade php-xmlUpgrade phpUpgrade php-commonUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-cliUpgrade php-recodeUpgrade php-fpm | Jan 10, 2024 | Aug 11, 2023 |
| Oracle_linux | — | Upgrade php-pecl-apcuUpgrade php-dbgUpgrade phpUpgrade php-pearUpgrade php-jsonUpgrade php-pecl-xdebug3Upgrade php-gdUpgrade php-intlUpgrade php-pdoUpgrade php-develUpgrade php-bcmathUpgrade php-enchantUpgrade php-gmpUpgrade php-ldapUpgrade php-opcacheUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-soapUpgrade apcu-panelUpgrade libzipUpgrade php-xmlUpgrade php-commonUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade libzip-develUpgrade php-cliUpgrade php-processUpgrade php-dbaUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-ffiUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-snmp | Oct 23, 2023 | Aug 3, 2023 |
| Php | — | Upgrade to PHP version 8.1.22Upgrade to PHP version 8.2.8Upgrade to PHP version 8.0.30 | Aug 23, 2023 | Aug 11, 2023 |
| Redhat_linux | — | Upgrade php-gdUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade phpUpgrade php-bcmath-debuginfoUpgrade php-intl-debuginfoUpgrade apcu-panelUpgrade php-dbaUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-soap-debuginfoUpgrade php-ffiUpgrade php-jsonUpgrade php-debugsourceUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade php-enchantUpgrade php-cli-debuginfoUpgrade php-opcache-debuginfoUpgrade php-gd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbg-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-processUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-ldapUpgrade php-pdoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebug3Upgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmathUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-mysqlndUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-ffi-debuginfoUpgrade php-develUpgrade php-snmpUpgrade php-pearUpgrade php-common-debuginfoUpgrade php-odbcUpgrade php-xmlUpgrade php-pecl-apcuUpgrade libzip-debuginfoUpgrade libzip-develUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-cli | Nov 1, 2023 | Aug 11, 2023 |
| Rocky_linux | — | Upgrade php-dbg-debuginfoUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gdUpgrade php-pecl-xdebug3-debugsourceUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-snmpUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-jsonUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-pecl-rrdUpgrade php-cliUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug3Upgrade php-processUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-pecl-apcu-debuginfoUpgrade php-fpmUpgrade php-develUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-ffiUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-fpm-debuginfoUpgrade php-process-debuginfoUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-ldapUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade libzip-develUpgrade php-commonUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade php-opcacheUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-ffi-debuginfoUpgrade php-debugsourceUpgrade php-dbgUpgrade php-dba-debuginfoUpgrade php-bcmathUpgrade php-json-debuginfoUpgrade php | Mar 5, 2024 | Aug 11, 2023 |
| Suse | — | Upgrade php74-readlineUpgrade php74-shmopUpgrade php7-ftpUpgrade php7-posixUpgrade php7-curlUpgrade php7-tidyUpgrade php74-fastcgiUpgrade php8-sodiumUpgrade php8-xmlreaderUpgrade php74-ftpUpgrade php74-calendarUpgrade php8-fpmUpgrade php74-socketsUpgrade php7-mbstringUpgrade php7-bcmathUpgrade php7-pdoUpgrade php74-dbaUpgrade php74-mbstringUpgrade php8-dbaUpgrade php8-fileinfoUpgrade php74-gdUpgrade php8-ldapUpgrade php8Upgrade php7-gettextUpgrade php7-pgsqlUpgrade php74-xmlwriterUpgrade php7-sqliteUpgrade php74-pharUpgrade php74-exifUpgrade php8-fastcgiUpgrade php8-pharUpgrade php74-pgsqlUpgrade php74-sysvsemUpgrade php7-cliUpgrade php8-readlineUpgrade php8-gmpUpgrade php8-pcntlUpgrade php7-domUpgrade php7Upgrade php7-embedUpgrade php74-gettextUpgrade php7-intlUpgrade php74-sysvmsgUpgrade php7-enchantUpgrade php7-xmlwriterUpgrade php7-sysvmsgUpgrade php7-fpmUpgrade php74-develUpgrade php8-posixUpgrade php74-snmpUpgrade php8-iconvUpgrade php7-soapUpgrade php8-tidyUpgrade php74-opensslUpgrade php7-iconvUpgrade php8-ftpUpgrade php8-odbcUpgrade php7-shmopUpgrade php8-tokenizerUpgrade php7-snmpUpgrade apache2-mod_php7Upgrade php8-curlUpgrade php7-sysvsemUpgrade php74-sqliteUpgrade php8-embedUpgrade php8-snmpUpgrade php74-jsonUpgrade php74-xslUpgrade php74-bz2Upgrade php8-sysvshmUpgrade php7-exifUpgrade php7-bz2Upgrade php7-gdUpgrade php7-pharUpgrade php74-fpmUpgrade php8-domUpgrade php7-socketsUpgrade php74-ctypeUpgrade php7-tokenizerUpgrade php7-xmlreaderUpgrade php74-pdoUpgrade php74-tokenizerUpgrade php8-sqliteUpgrade php7-develUpgrade php7-zlibUpgrade php74-mysqlUpgrade php74-xmlrpcUpgrade php74-zipUpgrade php74-opcacheUpgrade php74-sysvshmUpgrade php8-enchantUpgrade php8-zlibUpgrade php8-soapUpgrade php8-opcacheUpgrade php8-intlUpgrade php74-fileinfoUpgrade php7-odbcUpgrade php8-sysvsemUpgrade php74-odbcUpgrade php74-posixUpgrade php74-soapUpgrade php7-mysqlUpgrade php7-firebirdUpgrade php74-xmlreaderUpgrade php7-opcacheUpgrade php8-opensslUpgrade php8-mysqlUpgrade php7-fastcgiUpgrade php8-cliUpgrade php7-testUpgrade php74-sodiumUpgrade php8-calendarUpgrade php8-xslUpgrade php8-shmopUpgrade php8-develUpgrade php74-ldapUpgrade php7-zipUpgrade php7-sodiumUpgrade php7-pcntlUpgrade php7-xslUpgrade php74-iconvUpgrade php74Upgrade php8-gdUpgrade php8-ctypeUpgrade php74-intlUpgrade php7-xmlrpcUpgrade php7-fileinfoUpgrade php8-gettextUpgrade php7-jsonUpgrade php8-zipUpgrade php7-opensslUpgrade php8-bz2Upgrade php74-zlibUpgrade php74-tidyUpgrade php8-xmlwriterUpgrade php7-gmpUpgrade php74-curlUpgrade php8-pdoUpgrade php74-domUpgrade php7-readlineUpgrade php8-sysvmsgUpgrade php8-socketsUpgrade php7-ldapUpgrade php8-pgsqlUpgrade php8-mbstringUpgrade php8-exifUpgrade php7-sysvshmUpgrade php7-dbaUpgrade php7-ctypeUpgrade php8-bcmathUpgrade php74-enchantUpgrade php74-bcmathUpgrade php74-pcntlUpgrade php74-gmpUpgrade php7-calendarUpgrade apache2-mod_php8Upgrade apache2-mod_php74Upgrade php8-test | Aug 29, 2023 | Aug 11, 2023 |
| Ubuntu | — | Upgrade libapache2-mod-php7.2 (Ubuntu Pro)Upgrade php7.4Upgrade php7.0-xml (Ubuntu Pro)Upgrade php7.4-fpmUpgrade libapache2-mod-php8.1Upgrade php7.2 (Ubuntu Pro)Upgrade php8.1-cliUpgrade php8.1-fpmUpgrade php7.4-xmlUpgrade php7.2-xml (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.4-cgiUpgrade php7.2-cli (Ubuntu Pro)Upgrade php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.2-cgi (Ubuntu Pro)Upgrade php8.1-cgiUpgrade php7.4-cliUpgrade php7.0-cli (Ubuntu Pro)Upgrade php8.1-xmlUpgrade php8.1Upgrade php7.2-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.4 | Aug 24, 2023 | Aug 11, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub