The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php-ldapUpgrade php-pgsqlUpgrade php-odbcUpgrade php-mysqlUpgrade phpUpgrade php-develUpgrade php-imap | Dec 1, 2016 | May 7, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 7, 2008 |
| Oracle_linux | — | Upgrade php-mysqlUpgrade php-gdUpgrade php-soapUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-dbaUpgrade php-ncursesUpgrade phpUpgrade php-develUpgrade php-ldapUpgrade php-cliUpgrade php-bcmathUpgrade php-commonUpgrade php-imapUpgrade php-xmlUpgrade php-pgsqlUpgrade php-pdoUpgrade php-snmpUpgrade php-odbc | Oct 16, 2024 | May 7, 2008 |
| Php | — | Upgrade to PHP version 4.4.8Upgrade to PHP version 5.2.5 | Oct 1, 2012 | May 7, 2008 |
| Suse | — | Upgrade php5-zlibUpgrade php5-tidyUpgrade php5-gdUpgrade php5-gettextUpgrade php5-ctypeUpgrade php5-imapUpgrade php5-suhosinUpgrade php5-socketsUpgrade php5-sysvshmUpgrade php5-pearUpgrade php5-wddxUpgrade php5-sysvmsgUpgrade apache2-mod_php5Upgrade php5-dbaseUpgrade php5-domUpgrade php5-pspellUpgrade php5-posixUpgrade php5-opensslUpgrade php5-xslUpgrade php5-mbstringUpgrade php5-xmlrpcUpgrade php5-exifUpgrade php5-iconvUpgrade php5-pgsqlUpgrade php5-dbaUpgrade php5-gmpUpgrade php5-soapUpgrade php5-bz2Upgrade php5-mhashUpgrade php5-fastcgiUpgrade php5-pcntlUpgrade php5-xmlreaderUpgrade php5-sqliteUpgrade php5-pdoUpgrade php5-odbcUpgrade php5-bcmathUpgrade php5-develUpgrade php5-mcryptUpgrade php5-ftpUpgrade php5-ncursesUpgrade php5-curlUpgrade php5-shmopUpgrade php5-sysvsemUpgrade php5-ldapUpgrade php5-snmpUpgrade php5-tokenizerUpgrade php5-mysqlUpgrade php5-calendar | Dec 12, 2013 | May 7, 2008 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-cliUpgrade php5-curlUpgrade libapache2-mod-php5 | Nov 8, 2024 | May 7, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub