The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Jun 9, 2015 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Aug 28, 2015 | Jun 9, 2015 |
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Mar 29, 2016 | Jun 9, 2015 |
| Centos_linux | — | Upgrade php-processUpgrade php-tidyUpgrade php-pspellUpgrade php-mysqlndUpgrade php-intlUpgrade php-soapUpgrade php-imapUpgrade php-odbcUpgrade php-gdUpgrade php-snmpUpgrade phpUpgrade php-dbaUpgrade php-pgsqlUpgrade php-fpmUpgrade php-cliUpgrade php-enchantUpgrade php-mbstringUpgrade php-bcmathUpgrade php-mysqlUpgrade php-commonUpgrade php-recodeUpgrade php-xmlUpgrade php-embeddedUpgrade php-develUpgrade php-xmlrpcUpgrade php-ztsUpgrade php-pdoUpgrade php-ldap | Dec 1, 2016 | Jun 9, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 22, 2015 |
| Freebsd | — | Upgrade php55Upgrade php5Upgrade php56 | Dec 10, 2025 | May 22, 2015 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jun 9, 2015 |
| Oracle Solaris | — | Upgrade web/php-56/extension/php-suhosin-extension to version 0.9.37.1-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56 to version 5.6.30-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56/extension/php-xdebug to version 2.3.2-0.175.3.22.0.2.0 on Solaris 11.3 | Jul 19, 2017 | Jun 9, 2015 |
| Oracle_linux | — | Upgrade php55-php-processUpgrade php54-php-commonUpgrade php-mysqlUpgrade php55-php-ldapUpgrade php55-php-pspellUpgrade php-snmpUpgrade php54-php-mysqlndUpgrade php-fpmUpgrade php55-php-opcacheUpgrade php55-php-develUpgrade php55-php-pdoUpgrade php-enchantUpgrade php-cliUpgrade php-pspellUpgrade php55-php-xmlrpcUpgrade php55-php-mysqlndUpgrade php54-php-recodeUpgrade php55-php-mbstringUpgrade php-xmlUpgrade php55-php-commonUpgrade php54-php-snmpUpgrade php54-php-pgsqlUpgrade php55-php-fpmUpgrade php-embeddedUpgrade php-recodeUpgrade php-mysqlndUpgrade php54-php-bcmathUpgrade php-ztsUpgrade php54-php-gdUpgrade php55-php-gmpUpgrade php55-php-snmpUpgrade php55-phpUpgrade php-develUpgrade php-gdUpgrade php54-php-pspellUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pdoUpgrade php-processUpgrade php54-php-xmlUpgrade php54-php-intlUpgrade php55-php-cliUpgrade php54-php-processUpgrade php54-php-enchantUpgrade php54-php-mbstringUpgrade php55-php-intlUpgrade php54-php-tidyUpgrade php-pgsqlUpgrade php54-php-ldapUpgrade php54-php-cliUpgrade php54-php-dbaUpgrade php55-php-soapUpgrade php-tidyUpgrade php-soapUpgrade php55-php-bcmathUpgrade php54-php-develUpgrade php-bcmathUpgrade php54-php-odbcUpgrade php54-php-xmlrpcUpgrade php54-php-imapUpgrade php-imapUpgrade php-dbaUpgrade php54-php-pdoUpgrade php54-php-fpmUpgrade php55-php-gdUpgrade php55-php-enchantUpgrade php-intlUpgrade php55-php-odbcUpgrade php55-php-pgsqlUpgrade php54-php-soapUpgrade php55-php-recodeUpgrade php54-phpUpgrade php-ldapUpgrade php55-php-xmlUpgrade php-commonUpgrade phpUpgrade php55-php-dbaUpgrade php-odbc | Oct 16, 2024 | Jun 9, 2015 |
| Php | — | Upgrade to PHP version 5.6.9Upgrade to PHP version 5.4.41Upgrade to PHP version 5.5.25 | Jun 17, 2015 | Jun 9, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2015 |
| Suse | — | Upgrade php5-zipUpgrade php5-xmlreaderUpgrade php5-domUpgrade php5-opensslUpgrade php5-bz2Upgrade php5-shmopUpgrade php53-mbstringUpgrade apache2-mod_php53Upgrade php53-exifUpgrade php53-odbcUpgrade php53-posixUpgrade php53-xmlreaderUpgrade php53-imapUpgrade php53-curlUpgrade php5-sysvmsgUpgrade php5-fastcgiUpgrade php53-pcntlUpgrade php5-mcryptUpgrade php5-iconvUpgrade php5-jsonUpgrade php53-calendarUpgrade php53-snmpUpgrade php5-mysqlUpgrade php53-ctypeUpgrade php5-calendarUpgrade php5-odbcUpgrade php5-snmpUpgrade php53-gettextUpgrade php53-xmlwriterUpgrade php53-fileinfoUpgrade php53-pdoUpgrade php5-socketsUpgrade php53Upgrade php53-gmpUpgrade php53-iconvUpgrade php5-xslUpgrade php5-sysvsemUpgrade php53-socketsUpgrade php5-xmlwriterUpgrade php53-sysvshmUpgrade php5-wddxUpgrade php5-soapUpgrade php53-zlibUpgrade php5-gmpUpgrade php53-suhosinUpgrade php53-gdUpgrade php53-readlineUpgrade php5-pdoUpgrade php5-exifUpgrade php5-gettextUpgrade php5-ftpUpgrade php53-sysvsemUpgrade php53-shmopUpgrade php5-mbstringUpgrade php53-tidyUpgrade php53-zipUpgrade php53-pspellUpgrade php5-dbaUpgrade php5-ldapUpgrade php5-develUpgrade php5-gdUpgrade php5Upgrade php5-zlibUpgrade php5-fileinfoUpgrade php5-sqliteUpgrade php53-pearUpgrade php53-ldapUpgrade php5-tokenizerUpgrade php53-sqliteUpgrade php5-fpmUpgrade php5-enchantUpgrade php53-bcmathUpgrade php5-pgsqlUpgrade php53-intlUpgrade php53-mcryptUpgrade php53-jsonUpgrade php53-wddxUpgrade php53-soapUpgrade php5-xmlrpcUpgrade php5-pspellUpgrade php5-sysvshmUpgrade php53-pgsqlUpgrade php53-mysqlUpgrade php5-suhosinUpgrade php5-pearUpgrade php53-sysvmsgUpgrade apache2-mod_php5Upgrade php5-ctypeUpgrade php53-ftpUpgrade php5-curlUpgrade php53-opensslUpgrade php5-intlUpgrade php5-bcmathUpgrade php5-pcntlUpgrade php53-develUpgrade php53-domUpgrade php53-bz2Upgrade php53-tokenizerUpgrade php53-fastcgiUpgrade php53-xslUpgrade php53-xmlrpcUpgrade php53-dba | Dec 18, 2015 | Jun 9, 2015 |
| Ubuntu | — | Upgrade php5-cliUpgrade php5-cgiUpgrade php5-fpmUpgrade libapache2-mod-php5 | Nov 8, 2024 | Jun 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub