PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php-bcmathUpgrade php-odbcUpgrade php-intlUpgrade php-pgsqlUpgrade php-dbaUpgrade php-imapUpgrade php-tidyUpgrade php-embeddedUpgrade php-soapUpgrade phpUpgrade php-commonUpgrade php-mysqlndUpgrade php-ldapUpgrade php-enchantUpgrade php-mbstringUpgrade php-pspellUpgrade php-ztsUpgrade php-fpmUpgrade php-processUpgrade php-cliUpgrade php-xmlUpgrade php-develUpgrade php-recodeUpgrade php-gdUpgrade php-pdoUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-snmp | Dec 1, 2016 | May 16, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 6, 2015 |
| Oracle_linux | — | Upgrade php54-php-pecl-zendopcacheUpgrade php-processUpgrade php-pdoUpgrade php-enchantUpgrade php-pspellUpgrade php-develUpgrade php54-php-soapUpgrade php-soapUpgrade php55-php-snmpUpgrade php55-php-pdoUpgrade php55-phpUpgrade php55-php-opcacheUpgrade php-xmlrpcUpgrade php-tidyUpgrade php54-php-pdoUpgrade php-recodeUpgrade php-fpmUpgrade php54-runtimeUpgrade php-mysqlndUpgrade php-imapUpgrade php54-php-enchantUpgrade php54-php-gdUpgrade php55-php-xmlrpcUpgrade php55-php-gmpUpgrade php55-php-dbaUpgrade php54-php-mysqlndUpgrade php-embeddedUpgrade php-bcmathUpgrade php-gdUpgrade php-dbaUpgrade php-ldapUpgrade php55-php-develUpgrade php55-php-mysqlndUpgrade php54Upgrade php-intlUpgrade php54-php-recodeUpgrade php54-php-cliUpgrade phpUpgrade php54-php-commonUpgrade php55-php-mbstringUpgrade php55-php-pspellUpgrade php54-php-processUpgrade php54-php-xmlUpgrade php-mysqlUpgrade php55-php-fpmUpgrade php54-php-develUpgrade php-mbstringUpgrade php55-php-ldapUpgrade php-snmpUpgrade php54-php-imapUpgrade php54-php-intlUpgrade php55-php-commonUpgrade php-odbcUpgrade php55-php-recodeUpgrade php54-php-snmpUpgrade php54-scldevelUpgrade php55-php-odbcUpgrade php55-php-xmlUpgrade php-commonUpgrade php54-php-pspellUpgrade php54-php-bcmathUpgrade php55-php-processUpgrade php55-php-pgsqlUpgrade php-cliUpgrade php54-php-odbcUpgrade php54-php-ldapUpgrade php54-phpUpgrade php-pgsqlUpgrade php-ztsUpgrade php55-php-intlUpgrade php55-php-enchantUpgrade php54-php-fpmUpgrade php55-php-soapUpgrade php-xmlUpgrade php55-php-cliUpgrade php54-php-pgsqlUpgrade php54-php-tidyUpgrade php55-php-bcmathUpgrade php54-php-xmlrpcUpgrade php55-php-gdUpgrade php54-php-dbaUpgrade php54-php-mbstring | Oct 16, 2024 | May 16, 2016 |
| Php | — | Upgrade to PHP version 5.6.8Upgrade to PHP version 5.5.24Upgrade to PHP version 5.4.40 | Jun 3, 2016 | May 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2015 |
| Suse | — | Upgrade php5-pdoUpgrade php5-enchantUpgrade php5-pgsqlUpgrade php5-zipUpgrade php53-imapUpgrade php5-jsonUpgrade php53-opensslUpgrade php53-pearUpgrade php5-zlibUpgrade php5-odbcUpgrade php5-pcntlUpgrade php53-tokenizerUpgrade php53-curlUpgrade php5-wddxUpgrade php5-develUpgrade php5-tokenizerUpgrade php5-dbaUpgrade php53-gettextUpgrade php5Upgrade php53-intlUpgrade php53-bz2Upgrade php5-mysqlUpgrade php53-fastcgiUpgrade php53-xmlreaderUpgrade php53-ldapUpgrade php53-xmlrpcUpgrade php53-suhosinUpgrade php53-pspellUpgrade php5-ftpUpgrade php53-bcmathUpgrade php53-xslUpgrade php53-mysqlUpgrade php53-domUpgrade php53-develUpgrade php53-socketsUpgrade php5-xmlwriterUpgrade php5-intlUpgrade php5-sysvshmUpgrade php53-posixUpgrade php53-exifUpgrade php5-gmpUpgrade php5-gettextUpgrade apache2-mod_php5Upgrade php5-soapUpgrade php53-shmopUpgrade php5-sqliteUpgrade php5-bcmathUpgrade php53-calendarUpgrade php53-sysvsemUpgrade php53-fileinfoUpgrade php5-exifUpgrade php5-sysvsemUpgrade php5-mcryptUpgrade php53-sysvshmUpgrade php5-pspellUpgrade php53-tidyUpgrade php5-pearUpgrade php53-gdUpgrade php5-sysvmsgUpgrade php53-sysvmsgUpgrade php5-xmlrpcUpgrade php5-fileinfoUpgrade php53-zlibUpgrade php5-xslUpgrade php53-soapUpgrade php5-curlUpgrade php53-sqliteUpgrade php5-ldapUpgrade apache2-mod_php53Upgrade php53-mcryptUpgrade php5-socketsUpgrade php5-fpmUpgrade php5-suhosinUpgrade php53-xmlwriterUpgrade php5-opensslUpgrade php5-xmlreaderUpgrade php5-iconvUpgrade php5-ctypeUpgrade php53-mbstringUpgrade php5-snmpUpgrade php53-snmpUpgrade php53-odbcUpgrade php53-ctypeUpgrade php5-mbstringUpgrade php53-readlineUpgrade php5-fastcgiUpgrade php53-pdoUpgrade php5-gdUpgrade php5-shmopUpgrade php53-pcntlUpgrade php53-iconvUpgrade php5-domUpgrade php53Upgrade php5-bz2Upgrade php53-zipUpgrade php5-calendarUpgrade php53-ftpUpgrade php53-dbaUpgrade php53-pgsqlUpgrade php53-gmpUpgrade php53-wddxUpgrade php53-json | Dec 18, 2015 | Jul 17, 2015 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cliUpgrade php5-fpm | Nov 8, 2024 | May 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub