The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004Apply OS X security update 2011-001Upgrade macOS to the latest version | Aug 28, 2015 | Sep 28, 2010 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Sep 28, 2010 |
| Centos_linux | — | Upgrade php-develUpgrade php-ztsUpgrade php-recodeUpgrade php53-imapUpgrade php53-mbstringUpgrade php-ldapUpgrade php-commonUpgrade php53-develUpgrade php-xmlrpcUpgrade php53-gdUpgrade php-xmlUpgrade php-embeddedUpgrade php-bcmathUpgrade php53-odbcUpgrade php-snmpUpgrade php53-pdoUpgrade php-pdoUpgrade php-mbstringUpgrade php-mysqlUpgrade php53-mysqlUpgrade php-cliUpgrade php53-soapUpgrade php53Upgrade php53-pgsqlUpgrade php53-commonUpgrade php53-xmlUpgrade php-processUpgrade php-tidyUpgrade php-imapUpgrade php53-processUpgrade php-odbcUpgrade php53-intlUpgrade php53-xmlrpcUpgrade php-pspellUpgrade phpUpgrade php-soapUpgrade php-pgsqlUpgrade php-dbaUpgrade php-intlUpgrade php53-snmpUpgrade php-enchantUpgrade php53-cliUpgrade php-gdUpgrade php53-pspellUpgrade php53-ldapUpgrade php53-dbaUpgrade php53-bcmath | Dec 1, 2016 | Sep 28, 2010 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Sep 28, 2010 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Sep 28, 2010 |
| Oracle_linux | — | Upgrade php53-develUpgrade php-recodeUpgrade php-xmlrpcUpgrade php53-dbaUpgrade php53-snmpUpgrade php53-pspellUpgrade php-processUpgrade php-pspellUpgrade php-snmpUpgrade php53-cliUpgrade php53-intlUpgrade php-intlUpgrade php53-bcmathUpgrade php-cliUpgrade php-dbaUpgrade php-commonUpgrade php-mbstringUpgrade php53-mysqlUpgrade php53-ldapUpgrade php53-xmlrpcUpgrade php-mysqlUpgrade php53-processUpgrade php-imapUpgrade php-tidyUpgrade php53-pdoUpgrade php-odbcUpgrade php53-commonUpgrade php-soapUpgrade php-gdUpgrade php-develUpgrade php-ztsUpgrade php-pdoUpgrade php53-imapUpgrade php-xmlUpgrade php53-pgsqlUpgrade php-bcmathUpgrade php53-soapUpgrade php-pgsqlUpgrade php53-odbcUpgrade php-embeddedUpgrade php53-gdUpgrade phpUpgrade php53Upgrade php53-xmlUpgrade php53-mbstringUpgrade php-ldapUpgrade php-enchant | Oct 16, 2024 | Sep 28, 2010 |
| Php | — | Upgrade to PHP version 5.3.4 | Oct 1, 2012 | Sep 28, 2010 |
| Suse | — | Upgrade php8-sqliteUpgrade php53-opensslUpgrade php53-mysqlUpgrade php53-odbcUpgrade php53-ftpUpgrade php53-pspellUpgrade php53-xmlreaderUpgrade php53-readlineUpgrade php8Upgrade php7Upgrade php8-gettextUpgrade php8-curlUpgrade php53-tokenizerUpgrade php53-pdoUpgrade php53-xmlrpcUpgrade php53-bcmathUpgrade php53-pcntlUpgrade php53-develUpgrade php7-mysqlUpgrade php53-xmlwriterUpgrade php8-fileinfoUpgrade php8-pdoUpgrade php53-pearUpgrade php7-iconvUpgrade php8-gmpUpgrade php53-exifUpgrade php8-dbaUpgrade php53Upgrade php53-pgsqlUpgrade php53-tidyUpgrade php7-pgsqlUpgrade php53-posixUpgrade php7-tokenizerUpgrade php7-xmlwriterUpgrade php53-sysvmsgUpgrade php53-wddxUpgrade php53-gettextUpgrade php8-xmlwriterUpgrade php53-iconvUpgrade php53-gdUpgrade apache2-mod_php53Upgrade php8-pcntlUpgrade php53-shmopUpgrade php7-domUpgrade php53-gmpUpgrade php8-embedUpgrade php8-ldapUpgrade php53-zipUpgrade php53-mbstringUpgrade php7-develUpgrade php8-fpmUpgrade php8-readlineUpgrade php8-socketsUpgrade php53-bz2Upgrade php7-pdoUpgrade php8-shmopUpgrade php8-odbcUpgrade php72-develUpgrade php8-mysqlUpgrade php8-sysvmsgUpgrade php8-ftpUpgrade php8-domUpgrade php5-develUpgrade php8-tidyUpgrade php53-imapUpgrade php53-fastcgiUpgrade php53-dbaUpgrade php7-sqliteUpgrade php53-socketsUpgrade php8-tokenizerUpgrade php53-curlUpgrade php53-suhosinUpgrade php8-iconvUpgrade php7-xmlreaderUpgrade php8-fastcgiUpgrade php8-xslUpgrade php8-calendarUpgrade php8-bz2Upgrade php53-snmpUpgrade php8-posixUpgrade apache2-mod_php7Upgrade php53-calendarUpgrade php8-zlibUpgrade php8-opensslUpgrade php8-snmpUpgrade php8-xmlreaderUpgrade php53-xslUpgrade apache2-mod_php8Upgrade php8-gdUpgrade php8-sysvsemUpgrade php8-intlUpgrade php53-zlibUpgrade php7-jsonUpgrade php53-sqliteUpgrade php53-domUpgrade php8-ffiUpgrade php8-exifUpgrade php8-enchantUpgrade php53-mcryptUpgrade php53-ldapUpgrade php53-sysvshmUpgrade php8-develUpgrade php8-pgsqlUpgrade php53-sysvsemUpgrade php8-bcmathUpgrade php8-mbstringUpgrade php8-sodiumUpgrade php7-ctypeUpgrade php8-sysvshmUpgrade php53-intlUpgrade php8-ctypeUpgrade php53-jsonUpgrade php8-soapUpgrade php53-fileinfoUpgrade php8-opcacheUpgrade php8-cliUpgrade php53-soapUpgrade php8-pharUpgrade php8-zipUpgrade php8-fpm-apacheUpgrade php53-ctype | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-cliUpgrade libapache2-mod-php5 | Nov 8, 2024 | Sep 28, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub