The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Mar 6, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Aug 28, 2015 | Mar 6, 2013 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Sep 17, 2013 | Mar 6, 2013 |
| Centos_linux | — | Upgrade php-imapUpgrade phpUpgrade php-xmlUpgrade php-ldapUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-cliUpgrade php-gdUpgrade php-mbstringUpgrade php-commonUpgrade php-dbaUpgrade php-odbcUpgrade php-ncursesUpgrade php-pgsqlUpgrade php-soapUpgrade php-develUpgrade php-mysqlUpgrade php-pdoUpgrade php-bcmath | Dec 1, 2016 | Mar 6, 2013 |
| Freebsd | — | Upgrade php5Upgrade php53 | Dec 10, 2025 | Mar 18, 2013 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 6, 2013 |
| Oracle Solaris | — | Upgrade web/php-53 to version 5.3.27-0.175.1.17.0.3.0 on Solaris 11.1Upgrade web/php-52 to version 5.2.17-0.175.1.17.0.3.0 on Solaris 11.1 | May 29, 2017 | Mar 6, 2013 |
| Oracle_linux | — | Upgrade php-xmlUpgrade php-cliUpgrade php-develUpgrade php-mbstringUpgrade php-fpmUpgrade php53-develUpgrade php53-mysqlUpgrade php53-processUpgrade php53-mbstringUpgrade php-processUpgrade php-pdoUpgrade php-mysqlUpgrade php-gdUpgrade php-xmlrpcUpgrade php53-commonUpgrade php53-odbcUpgrade php53-imapUpgrade php-recodeUpgrade php53-soapUpgrade php-snmpUpgrade php-enchantUpgrade php53Upgrade php-ztsUpgrade php-imapUpgrade php53-cliUpgrade php53-bcmathUpgrade php-commonUpgrade php53-ldapUpgrade php53-pdoUpgrade php53-gdUpgrade php-intlUpgrade php-pspellUpgrade php53-snmpUpgrade php53-intlUpgrade php-pgsqlUpgrade php-odbcUpgrade phpUpgrade php-soapUpgrade php-ncursesUpgrade php-bcmathUpgrade php-embeddedUpgrade php53-pspellUpgrade php-ldapUpgrade php-tidyUpgrade php53-xmlUpgrade php-dbaUpgrade php53-pgsqlUpgrade php53-xmlrpcUpgrade php53-dba | Oct 16, 2024 | Mar 6, 2013 |
| Php | — | Upgrade to PHP version 5.3.23Upgrade to PHP version 5.4.13 | Mar 14, 2013 | Mar 6, 2013 |
| Suse | — | Upgrade php53-develUpgrade php53-sysvmsgUpgrade php53-calendarUpgrade php53-socketsUpgrade php5-develUpgrade php5-imapUpgrade php53-shmopUpgrade php53-jsonUpgrade php53-tidyUpgrade php5-zipUpgrade php53-readlineUpgrade php5-mssqlUpgrade php5-socketsUpgrade php5-domUpgrade php5-xslUpgrade php5-pdoUpgrade php53-ldapUpgrade php53-odbcUpgrade php53-fileinfoUpgrade php5-bcmathUpgrade php5-ftpUpgrade php53-imapUpgrade php5-xmlrpcUpgrade php53-sysvsemUpgrade php5-sysvmsgUpgrade php53-wddxUpgrade php53-iconvUpgrade php5-gettextUpgrade php53-pdoUpgrade php53-ftpUpgrade php53-gdUpgrade php5-wddxUpgrade php5-mysqlUpgrade php5-xmlreaderUpgrade php53-mbstringUpgrade php5-iconvUpgrade php53-suhosinUpgrade php5-gmpUpgrade php5-pearUpgrade php5-sysvsemUpgrade php5-ldapUpgrade php53-sysvshmUpgrade php5-suhosinUpgrade php53-soapUpgrade php5-pharUpgrade php5-intlUpgrade php5-hashUpgrade php53-mcryptUpgrade php5-mcryptUpgrade php5Upgrade php53-sqliteUpgrade php53-ctypeUpgrade php5-jsonUpgrade php53-curlUpgrade php5-opensslUpgrade php5-fastcgiUpgrade php53-gmpUpgrade php5-zlibUpgrade php53-dbaUpgrade sle-sdk-releaseUpgrade php53-mysqlUpgrade php53-gettextUpgrade php53-fastcgiUpgrade php5-calendarUpgrade php53-opensslUpgrade php5-ncursesUpgrade php53-snmpUpgrade php5-tokenizerUpgrade php5-snmpUpgrade php5-pgsqlUpgrade php53-zipUpgrade php5-pspellUpgrade php5-pcntlUpgrade php5-posixUpgrade php53-domUpgrade php5-mhashUpgrade php5-sysvshmUpgrade php53-bz2Upgrade php53-intlUpgrade php5-tidyUpgrade php5-bz2Upgrade php5-fileinfoUpgrade php53-xmlrpcUpgrade php5-dbaseUpgrade php53-exifUpgrade php5-ctypeUpgrade php5-fpmUpgrade php5-sqliteUpgrade php5-xmlwriterUpgrade php53-pgsqlUpgrade php5-gdUpgrade php5-exifUpgrade php53-pspellUpgrade php53-xslUpgrade php53-xmlwriterUpgrade apache2-mod_php53Upgrade php53-pcntlUpgrade php53-bcmathUpgrade php53-tokenizerUpgrade php5-readlineUpgrade apache2-mod_php5Upgrade php53-xmlreaderUpgrade php5-soapUpgrade php5-mbstringUpgrade php5-curlUpgrade php5-odbcUpgrade php5-enchantUpgrade php53-pearUpgrade php53-posixUpgrade php53Upgrade php5-shmopUpgrade php5-dbaUpgrade php53-zlib | Feb 17, 2015 | Mar 6, 2013 |
| Ubuntu | — | Upgrade php5 | Nov 8, 2024 | Mar 6, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub