In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade phpUpgrade php-pdoUpgrade php-opcacheUpgrade php-fpmUpgrade php-gmpUpgrade php-mysqlndUpgrade php-intlUpgrade php-pspellUpgrade php-soapUpgrade php-sodiumUpgrade php-bcmathUpgrade php-embeddedUpgrade php-gdUpgrade php-ldapUpgrade php-develUpgrade php-enchantUpgrade php-dbgUpgrade php-commonUpgrade php-snmpUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-processUpgrade php-cliUpgrade php-debuginfoUpgrade php-odbcUpgrade php-dbaUpgrade php-xml | Sep 14, 2023 | Oct 4, 2021 |
| Amazon_linux | — | Upgrade php73 | Sep 9, 2021 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 4, 2021 |
| Debian | — | Upgrade php7.4 | Jul 8, 2021 | Jul 8, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Sep 30, 2022 | Oct 4, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade phpUpgrade php-processUpgrade php-soapUpgrade php-gdUpgrade php-odbcUpgrade php-commonUpgrade php-ldapUpgrade php-pdoUpgrade php-recodeUpgrade php-cliUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-xml | Sep 24, 2021 | Sep 24, 2021 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.30-11.4.38.0.1.101.3 on Solaris 11.4Upgrade web/php-74 to version 7.4.23-11.4.38.0.1.101.3 on Solaris 11.4Upgrade web/php-80 to version 8.0.10-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Nov 17, 2021 |
| Php | — | Upgrade to PHP version 7.3.28Upgrade to PHP version 8.0.7Upgrade to PHP version 7.4.20 | Nov 30, 2021 | Oct 4, 2021 |
| Suse | — | Upgrade php74-gdUpgrade php7-calendarUpgrade php72-pcntlUpgrade php7-soapUpgrade php72-sysvshmUpgrade php74-zipUpgrade php7-intlUpgrade php7-mysqlUpgrade php7-gettextUpgrade php72-domUpgrade php74-develUpgrade php74-zlibUpgrade php7-gmpUpgrade php74-bz2Upgrade php7-curlUpgrade php74-curlUpgrade php74-exifUpgrade php74-iconvUpgrade php7-firebirdUpgrade php72-ldapUpgrade php7-posixUpgrade php72-fileinfoUpgrade php7-sysvsemUpgrade php7-xmlwriterUpgrade php7-zipUpgrade php72-tokenizerUpgrade php7-sodiumUpgrade php7-pdoUpgrade php72-pdoUpgrade php74-pcntlUpgrade php74-tidyUpgrade php7-testUpgrade php72-ctypeUpgrade php72-posixUpgrade php72-imapUpgrade php7-wddxUpgrade php7-fastcgiUpgrade php7-xslUpgrade php7-socketsUpgrade php74-sodiumUpgrade php72-dbaUpgrade php74-calendarUpgrade php72-sysvmsgUpgrade php74-snmpUpgrade php72-develUpgrade php72-socketsUpgrade php7-domUpgrade php74-shmopUpgrade php74-opcacheUpgrade php74-fpmUpgrade php72-pgsqlUpgrade php72-odbcUpgrade php7-tidyUpgrade php7-snmpUpgrade php74-enchantUpgrade php7-sqliteUpgrade php74-xslUpgrade php72-soapUpgrade php72-xmlrpcUpgrade php74-sysvshmUpgrade php7-iconvUpgrade php72-enchantUpgrade php7-enchantUpgrade php74-gmpUpgrade php74-gettextUpgrade php7-pearUpgrade php72-xmlreaderUpgrade php74-socketsUpgrade php72-bz2Upgrade php74-tokenizerUpgrade php72-snmpUpgrade php7-ctypeUpgrade php7-xmlreaderUpgrade php7-opcacheUpgrade php72-fastcgiUpgrade php72-opcacheUpgrade php7-gdUpgrade php74-ctypeUpgrade php74-soapUpgrade php72-shmopUpgrade php72-sysvsemUpgrade php74-dbaUpgrade php74-fileinfoUpgrade php72-ftpUpgrade php74-fastcgiUpgrade php72-gettextUpgrade php74-xmlwriterUpgrade php74-ftpUpgrade php74-mbstringUpgrade php72-opensslUpgrade php7-shmopUpgrade php72-zlibUpgrade php74-opensslUpgrade php7-tokenizerUpgrade php72-pharUpgrade php74-odbcUpgrade php72Upgrade php72-xslUpgrade php7-readlineUpgrade php7-bcmathUpgrade php74-domUpgrade php7Upgrade php7-develUpgrade php7-dbaUpgrade php7-cliUpgrade php7-embedUpgrade php74-pgsqlUpgrade php74-ldapUpgrade php7-sysvshmUpgrade php74-sysvsemUpgrade php7-opensslUpgrade php7-jsonUpgrade php74-pdoUpgrade php72-xmlwriterUpgrade php7-odbcUpgrade php74-readlineUpgrade php72-pearUpgrade php7-fpmUpgrade php72-iconvUpgrade php72-readlineUpgrade php74-sysvmsgUpgrade apache2-mod_php72Upgrade php7-pgsqlUpgrade php72-jsonUpgrade php7-exifUpgrade php72-wddxUpgrade php74-mysqlUpgrade php7-xmlrpcUpgrade php72-tidyUpgrade php7-ftpUpgrade php7-fileinfoUpgrade php72-fpmUpgrade php72-calendarUpgrade php72-exifUpgrade php74-intlUpgrade php72-mbstringUpgrade php72-gdUpgrade php72-pear-archive_tarUpgrade php72-mysqlUpgrade php7-pcntlUpgrade php7-mbstringUpgrade php72-zipUpgrade php7-pharUpgrade php7-pear-archive_tarUpgrade php7-bz2Upgrade php74-bcmathUpgrade php74-sqliteUpgrade php74Upgrade php72-sqliteUpgrade php72-pspellUpgrade php72-sodiumUpgrade php72-intlUpgrade php72-gmpUpgrade php7-ldapUpgrade apache2-mod_php74Upgrade php72-bcmathUpgrade apache2-mod_php7Upgrade php7-sysvmsgUpgrade php74-xmlreaderUpgrade php7-zlibUpgrade php74-pharUpgrade php74-posixUpgrade php74-jsonUpgrade php72-curlUpgrade php74-xmlrpc | Aug 7, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.4-fpmUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.2-fpmUpgrade php7.4-cgiUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.2-cliUpgrade php7.0-fpm (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.2-cgiUpgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.4-cli | Jul 8, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub