The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004Upgrade macOS to the latest versionApply OS X security update 2011-001 | Aug 28, 2015 | Sep 28, 2010 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Sep 28, 2010 |
| Centos_linux | — | Upgrade php-embeddedUpgrade php-develUpgrade php-pdoUpgrade php-ztsUpgrade php-mbstringUpgrade php-bcmathUpgrade php-recodeUpgrade php53-commonUpgrade php53-gdUpgrade php53Upgrade php-xmlrpcUpgrade php53-mbstringUpgrade php-cliUpgrade php53-mysqlUpgrade php-ldapUpgrade php-xmlUpgrade php-mysqlUpgrade php53-soapUpgrade php53-pgsqlUpgrade php53-imapUpgrade php53-develUpgrade php53-odbcUpgrade php-snmpUpgrade php-commonUpgrade php53-pdoUpgrade php-gdUpgrade php53-dbaUpgrade php53-snmpUpgrade php-pgsqlUpgrade php53-pspellUpgrade php-soapUpgrade php53-intlUpgrade php53-cliUpgrade php53-bcmathUpgrade php53-ldapUpgrade php53-processUpgrade php-tidyUpgrade phpUpgrade php-processUpgrade php-intlUpgrade php53-xmlrpcUpgrade php-enchantUpgrade php53-xmlUpgrade php-odbcUpgrade php-pspellUpgrade php-imapUpgrade php-dba | Dec 1, 2016 | Sep 28, 2010 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Sep 28, 2010 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Sep 28, 2010 |
| Oracle_linux | — | Upgrade php53-bcmathUpgrade php53-snmpUpgrade php-cliUpgrade php-dbaUpgrade php-recodeUpgrade php-mbstringUpgrade php53-pspellUpgrade php53-develUpgrade php53-processUpgrade php53-mysqlUpgrade php53-intlUpgrade php53-xmlrpcUpgrade php-pspellUpgrade php53-dbaUpgrade php-snmpUpgrade php-tidyUpgrade php-mysqlUpgrade php-processUpgrade php-xmlrpcUpgrade php53-cliUpgrade php53-ldapUpgrade php-commonUpgrade php-imapUpgrade php-intlUpgrade php-odbcUpgrade php53-commonUpgrade php53-xmlUpgrade php53-gdUpgrade php-xmlUpgrade phpUpgrade php53-mbstringUpgrade php-develUpgrade php53-pgsqlUpgrade php-embeddedUpgrade php53-soapUpgrade php-pgsqlUpgrade php-ztsUpgrade php53-odbcUpgrade php53Upgrade php-bcmathUpgrade php-soapUpgrade php53-imapUpgrade php-enchantUpgrade php-pdoUpgrade php-ldapUpgrade php-gdUpgrade php53-pdo | Oct 16, 2024 | Sep 28, 2010 |
| Php | — | Upgrade to PHP version 5.3.4 | Oct 1, 2012 | Sep 28, 2010 |
| Suse | — | Upgrade php53-domUpgrade php53-fileinfoUpgrade php7-jsonUpgrade php8-zipUpgrade php8-ctypeUpgrade php8-mbstringUpgrade php8-opcacheUpgrade php53-sysvsemUpgrade php8-sysvshmUpgrade php8-calendarUpgrade php53-intlUpgrade php8-xmlreaderUpgrade php53-jsonUpgrade php8-pharUpgrade php8-enchantUpgrade php53-mcryptUpgrade php8-fpm-apacheUpgrade php8-gdUpgrade php8-pgsqlUpgrade apache2-mod_php8Upgrade php8-develUpgrade php8-opensslUpgrade php53-soapUpgrade php53-ctypeUpgrade php8-cliUpgrade apache2-mod_php7Upgrade php8-xslUpgrade php8-exifUpgrade php8-bz2Upgrade php8-soapUpgrade php53-zlibUpgrade php8-snmpUpgrade php8-sodiumUpgrade php53-ldapUpgrade php8-sysvsemUpgrade php8-zlibUpgrade php53-snmpUpgrade php53-xslUpgrade php8-intlUpgrade php8-ffiUpgrade php7-ctypeUpgrade php8-bcmathUpgrade php8-posixUpgrade php53-calendarUpgrade php53-sqliteUpgrade php53-sysvshmUpgrade php53-odbcUpgrade php53Upgrade php8-shmopUpgrade php53-sysvmsgUpgrade php53-wddxUpgrade php53-gettextUpgrade php53-tidyUpgrade php8-xmlwriterUpgrade php7-iconvUpgrade php53-pspellUpgrade php53-xmlwriterUpgrade php53-bz2Upgrade php53-pdoUpgrade php8-socketsUpgrade php53-opensslUpgrade php53-socketsUpgrade php53-ftpUpgrade php53-suhosinUpgrade php8-tokenizerUpgrade php7-tokenizerUpgrade php8-sqliteUpgrade php53-curlUpgrade php7-develUpgrade php8-domUpgrade php53-zipUpgrade php53-fastcgiUpgrade php53-dbaUpgrade php7-sqliteUpgrade apache2-mod_php53Upgrade php53-pgsqlUpgrade php53-shmopUpgrade php53-pcntlUpgrade php8-readlineUpgrade php53-gdUpgrade php7Upgrade php53-develUpgrade php7-pdoUpgrade php8-fileinfoUpgrade php7-xmlreaderUpgrade php7-xmlwriterUpgrade php8-iconvUpgrade php53-iconvUpgrade php8-embedUpgrade php53-imapUpgrade php53-pearUpgrade php8-tidyUpgrade php53-readlineUpgrade php8-gmpUpgrade php8-odbcUpgrade php8-pcntlUpgrade php5-develUpgrade php8-pdoUpgrade php8-mysqlUpgrade php8-fastcgiUpgrade php72-develUpgrade php8-curlUpgrade php53-xmlreaderUpgrade php53-tokenizerUpgrade php53-exifUpgrade php53-bcmathUpgrade php8-sysvmsgUpgrade php8Upgrade php53-mysqlUpgrade php53-xmlrpcUpgrade php8-gettextUpgrade php53-mbstringUpgrade php7-mysqlUpgrade php8-dbaUpgrade php7-domUpgrade php8-ftpUpgrade php7-pgsqlUpgrade php8-ldapUpgrade php53-gmpUpgrade php8-fpmUpgrade php53-posix | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | Sep 28, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub