The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade php-soapUpgrade php-commonUpgrade php-odbcUpgrade php-ldapUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-pdoUpgrade php-xmlUpgrade php-processUpgrade phpUpgrade php-gdUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-cli | Dec 4, 2019 | May 22, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-mysqlUpgrade php-commonUpgrade php-xmlrpcUpgrade php-cliUpgrade php-pgsqlUpgrade php-processUpgrade phpUpgrade php-gdUpgrade php-odbcUpgrade php-ldapUpgrade php-recodeUpgrade php-soapUpgrade php-xmlUpgrade php-pdo | Dec 18, 2019 | May 22, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-cliUpgrade php-odbcUpgrade php-ldapUpgrade php-recodeUpgrade phpUpgrade php-processUpgrade php-xmlUpgrade php-soapUpgrade php-pgsqlUpgrade php-gdUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-common | Nov 19, 2019 | May 22, 2016 |
| Php | — | Upgrade to PHP version 5.5.29Upgrade to PHP version 5.6.13Upgrade to PHP version 5.4.45 | Jun 3, 2016 | May 21, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 25, 2015 |
| Suse | — | Upgrade php5-socketsUpgrade php53-intlUpgrade php53-soapUpgrade php5-dbaUpgrade php53-exifUpgrade php53-pspellUpgrade php5-zipUpgrade php5-intlUpgrade php53-wddxUpgrade php53-sysvsemUpgrade php5-xslUpgrade php5-pgsqlUpgrade php53-bz2Upgrade php53-jsonUpgrade php5-fpmUpgrade php5-fileinfoUpgrade php5-xmlrpcUpgrade php5-ldapUpgrade php53-sysvmsgUpgrade php53-develUpgrade php5-mbstringUpgrade php5-tokenizerUpgrade php53-xslUpgrade php5-iconvUpgrade apache2-mod_php53Upgrade php5-wddxUpgrade php53-ftpUpgrade php5-gettextUpgrade php5-exifUpgrade php53-pgsqlUpgrade php5-posixUpgrade php53-xmlrpcUpgrade php5-pspellUpgrade php5-ctypeUpgrade php53-tokenizerUpgrade php53-domUpgrade php5-suhosinUpgrade php5-gdUpgrade php53-opensslUpgrade php5-zlibUpgrade php5-enchantUpgrade apache2-mod_php5Upgrade php53-ldapUpgrade php5-pearUpgrade php5-sysvshmUpgrade php5-domUpgrade php53-mysqlUpgrade php5-sysvmsgUpgrade php5-gmpUpgrade php5-mysqlUpgrade php5-sqliteUpgrade php53-gmpUpgrade php53-zlibUpgrade php53-imapUpgrade php53-zipUpgrade php53-bcmathUpgrade php5-soapUpgrade php53-fastcgiUpgrade php53-pearUpgrade php5-pcntlUpgrade php5-curlUpgrade php53-snmpUpgrade php53-gettextUpgrade php5-odbcUpgrade php5-shmopUpgrade php53-odbcUpgrade php5-sysvsemUpgrade php53-calendarUpgrade php5-jsonUpgrade php53-suhosinUpgrade php53-sqliteUpgrade php53-posixUpgrade php53-xmlwriterUpgrade php53-dbaUpgrade php53-curlUpgrade php5-snmpUpgrade php53-pdoUpgrade php5-opensslUpgrade php5-xmlreaderUpgrade php5-ftpUpgrade php53Upgrade php53-ctypeUpgrade php5-develUpgrade php53-iconvUpgrade php53-readlineUpgrade php5-pdoUpgrade php53-xmlreaderUpgrade php53-socketsUpgrade php5-calendarUpgrade php5-mcryptUpgrade php53-mcryptUpgrade php5-opcacheUpgrade php5Upgrade php53-fileinfoUpgrade php5-xmlwriterUpgrade php5-fastcgiUpgrade php53-gdUpgrade php53-shmopUpgrade php5-bz2Upgrade php53-sysvshmUpgrade php53-pcntlUpgrade php5-bcmathUpgrade php53-mbstringUpgrade php53-tidy | Apr 26, 2016 | Apr 25, 2016 |
| Ubuntu | — | Upgrade php5-cliUpgrade php5-gdUpgrade php5-fpmUpgrade php5-cgiUpgrade php5-snmpUpgrade php5-mysqlndUpgrade libapache2-mod-php5 | Apr 27, 2016 | Apr 27, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub