The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Mar 6, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Aug 28, 2015 | Mar 6, 2013 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Sep 17, 2013 | Mar 6, 2013 |
| Centos_linux | — | Upgrade php-xmlrpcUpgrade php-gdUpgrade php-imapUpgrade php-ldapUpgrade php-snmpUpgrade php-cliUpgrade php-xmlUpgrade phpUpgrade php-pgsqlUpgrade php-dbaUpgrade php-mbstringUpgrade php-commonUpgrade php-odbcUpgrade php-soapUpgrade php-pdoUpgrade php-bcmathUpgrade php-mysqlUpgrade php-develUpgrade php-ncurses | Dec 1, 2016 | Mar 6, 2013 |
| Freebsd | — | Upgrade php5Upgrade php53 | Dec 10, 2025 | Mar 18, 2013 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 6, 2013 |
| Oracle Solaris | — | Upgrade web/php-52 to version 5.2.17-0.175.1.17.0.3.0 on Solaris 11.1Upgrade web/php-53 to version 5.3.27-0.175.1.17.0.3.0 on Solaris 11.1 | May 29, 2017 | Mar 6, 2013 |
| Oracle_linux | — | Upgrade php53-ldapUpgrade php53-xmlUpgrade php53-pgsqlUpgrade php-ncursesUpgrade php-fpmUpgrade php-snmpUpgrade php-xmlUpgrade php-recodeUpgrade php-pdoUpgrade php53-mbstringUpgrade php-develUpgrade php53-soapUpgrade php-cliUpgrade php53Upgrade php-ztsUpgrade php-processUpgrade php-enchantUpgrade php53-develUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php53-processUpgrade php-mbstringUpgrade php-gdUpgrade php53-mysqlUpgrade php53-commonUpgrade php53-odbcUpgrade php53-imapUpgrade php-dbaUpgrade php53-pspellUpgrade php53-xmlrpcUpgrade php-intlUpgrade php53-gdUpgrade php53-bcmathUpgrade php-embeddedUpgrade php53-intlUpgrade php53-snmpUpgrade php-commonUpgrade php53-dbaUpgrade php-pspellUpgrade php-imapUpgrade phpUpgrade php-bcmathUpgrade php-tidyUpgrade php-soapUpgrade php53-cliUpgrade php-ldapUpgrade php53-pdoUpgrade php-pgsqlUpgrade php-odbc | Oct 16, 2024 | Mar 6, 2013 |
| Php | — | Upgrade to PHP version 5.4.13Upgrade to PHP version 5.3.23 | Mar 14, 2013 | Mar 6, 2013 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade php5-ctypeUpgrade php5-pgsqlUpgrade php53-pgsqlUpgrade php53-intlUpgrade php53-xslUpgrade php53-xmlrpcUpgrade php5-pspellUpgrade php5-tidyUpgrade php5-mbstringUpgrade php5-bz2Upgrade php5-mhashUpgrade php53-pspellUpgrade php5-soapUpgrade apache2-mod_php5Upgrade php5-xmlwriterUpgrade php53-bcmathUpgrade php53-posixUpgrade php5-sysvshmUpgrade php53-bz2Upgrade php5-pcntlUpgrade php5-fpmUpgrade php5-zlibUpgrade php5-tokenizerUpgrade php5-readlineUpgrade php5-gdUpgrade php53-pcntlUpgrade php53-xmlwriterUpgrade php53-zipUpgrade php53-domUpgrade php53-tokenizerUpgrade php5-ncursesUpgrade apache2-mod_php53Upgrade php5-posixUpgrade php53-dbaUpgrade php5-snmpUpgrade php53-opensslUpgrade php53-gettextUpgrade php53-mysqlUpgrade php5-shmopUpgrade php5-calendarUpgrade php53-fastcgiUpgrade php53-exifUpgrade php5-dbaseUpgrade php53-gmpUpgrade php53-xmlreaderUpgrade php5-curlUpgrade php53Upgrade php53-zlibUpgrade php5-enchantUpgrade php5-odbcUpgrade php5-exifUpgrade php53-snmpUpgrade php5-dbaUpgrade php5-sqliteUpgrade php5-fileinfoUpgrade php53-pearUpgrade php5-bcmathUpgrade php5-xmlreaderUpgrade php5-iconvUpgrade php5-jsonUpgrade php5-pearUpgrade php5-ldapUpgrade php5-domUpgrade php53-soapUpgrade php53-jsonUpgrade php5-xmlrpcUpgrade php53-suhosinUpgrade php5-socketsUpgrade php53-sqliteUpgrade php53-iconvUpgrade php5-mysqlUpgrade php5-sysvmsgUpgrade php5-pharUpgrade php5-mssqlUpgrade php5Upgrade php53-mcryptUpgrade php53-tidyUpgrade php53-ldapUpgrade php53-mbstringUpgrade php5-develUpgrade php5-ftpUpgrade php53-ctypeUpgrade php5-imapUpgrade php5-hashUpgrade php53-curlUpgrade php53-sysvshmUpgrade php53-fileinfoUpgrade php5-mcryptUpgrade php5-intlUpgrade php5-pdoUpgrade php5-suhosinUpgrade php53-develUpgrade php5-zipUpgrade php53-ftpUpgrade php53-shmopUpgrade php5-fastcgiUpgrade php5-wddxUpgrade php53-sysvmsgUpgrade php53-pdoUpgrade php53-sysvsemUpgrade php53-odbcUpgrade php53-wddxUpgrade php5-gettextUpgrade php53-gdUpgrade php53-calendarUpgrade php53-socketsUpgrade php5-opensslUpgrade php5-gmpUpgrade php5-xslUpgrade php53-readlineUpgrade php53-imapUpgrade php5-sysvsem | Feb 17, 2015 | Mar 6, 2013 |
| Ubuntu | — | Upgrade php5 | Nov 8, 2024 | Mar 6, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub