An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 29, 2018 |
| Debian | — | Upgrade php5Upgrade php7.0 | Jul 7, 2018 | Apr 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Dec 3, 2018 | Apr 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pgsqlUpgrade php-processUpgrade phpUpgrade php-cliUpgrade php-soapUpgrade php-gdUpgrade php-odbcUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-commonUpgrade php-mysqlUpgrade php-pdoUpgrade php-ldap | Dec 4, 2019 | Apr 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-recodeUpgrade phpUpgrade php-soapUpgrade php-gdUpgrade php-pgsqlUpgrade php-odbcUpgrade php-ldapUpgrade php-processUpgrade php-cliUpgrade php-xmlrpcUpgrade php-commonUpgrade php-mysqlUpgrade php-pdoUpgrade php-xml | Dec 18, 2019 | Apr 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-processUpgrade php-cliUpgrade php-recodeUpgrade phpUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-gdUpgrade php-soapUpgrade php-odbcUpgrade php-pdoUpgrade php-ldapUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-common | Sep 24, 2019 | Apr 29, 2018 |
| Oracle Solaris | — | Upgrade web/php-56 to version 5.6.36-0.175.3.33.0.4.0 on Solaris 11.3Upgrade web/php-71 to version 7.1.17-0.175.3.33.0.4.0 on Solaris 11.3 | Jun 22, 2018 | Apr 29, 2018 |
| Php | — | Upgrade to PHP version 7.0.29Upgrade to PHP version 7.1.16Upgrade to PHP version 5.6.35Upgrade to PHP version 7.2.4 | Jun 11, 2018 | Apr 29, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 29, 2018 |
| Suse | — | Upgrade php53-imapUpgrade php53-readlineUpgrade php5-bcmathUpgrade php5-enchantUpgrade php5-xmlreaderUpgrade php7-socketsUpgrade php53-pspellUpgrade php5-pdoUpgrade php5-ftpUpgrade php5-soapUpgrade php5-odbcUpgrade php53-pcntlUpgrade php7-domUpgrade php53-posixUpgrade php7-sysvshmUpgrade php53-socketsUpgrade php5-sqliteUpgrade php53Upgrade php7-soapUpgrade php53-shmopUpgrade php7-pear-archive_tarUpgrade php5-sysvmsgUpgrade php5-calendarUpgrade php5-ldapUpgrade php5-mbstringUpgrade php5-mcryptUpgrade php5Upgrade php53-iconvUpgrade php7-gettextUpgrade php53-mcryptUpgrade php7-pcntlUpgrade php5-jsonUpgrade php53-snmpUpgrade php53-calendarUpgrade php7-gmpUpgrade php5-mysqlUpgrade php7-pspellUpgrade php5-bz2Upgrade php7-opensslUpgrade php7-xmlrpcUpgrade php5-pcntlUpgrade php53-gdUpgrade php7-ldapUpgrade php7-xslUpgrade php7-bz2Upgrade php5-exifUpgrade php53-xslUpgrade php7-dbaUpgrade php53-xmlwriterUpgrade php53-zipUpgrade php7-sqliteUpgrade php5-snmpUpgrade php5-gmpUpgrade php7-pearUpgrade php53-fastcgiUpgrade php53-dbaUpgrade php53-sqliteUpgrade php53-pearUpgrade php5-dbaUpgrade php5-pearUpgrade php53-gmpUpgrade php7-posixUpgrade php53-xmlreaderUpgrade php7-opcacheUpgrade php7Upgrade php7-xmlreaderUpgrade php7-intlUpgrade php5-shmopUpgrade php5-pharUpgrade php5-fastcgiUpgrade php7-zipUpgrade php53-sysvshmUpgrade php7-exifUpgrade php5-curlUpgrade php53-odbcUpgrade php53-pdoUpgrade php7-mcryptUpgrade php53-fileinfoUpgrade php7-gdUpgrade php53-ctypeUpgrade php53-zlibUpgrade php5-sysvsemUpgrade php7-imapUpgrade php53-xmlrpcUpgrade php53-suhosinUpgrade php53-gettextUpgrade php7-fileinfoUpgrade php5-intlUpgrade php53-bcmathUpgrade php5-develUpgrade php5-gettextUpgrade php5-pspellUpgrade php53-opensslUpgrade apache2-mod_php7Upgrade php53-intlUpgrade php53-sysvmsgUpgrade php5-ctypeUpgrade php7-enchantUpgrade php5-imapUpgrade php5-zipUpgrade php53-develUpgrade php5-xmlrpcUpgrade php7-calendarUpgrade php7-pdoUpgrade apache2-mod_php53Upgrade php5-sysvshmUpgrade php5-xslUpgrade php5-fpmUpgrade php5-tokenizerUpgrade php7-xmlwriterUpgrade php7-ftpUpgrade php53-tidyUpgrade php7-curlUpgrade php7-zlibUpgrade php7-shmopUpgrade php53-mysqlUpgrade php7-odbcUpgrade php5-posixUpgrade php5-fileinfoUpgrade php5-iconvUpgrade php53-sysvsemUpgrade php7-iconvUpgrade php7-jsonUpgrade php53-exifUpgrade php7-develUpgrade php53-ftpUpgrade apache2-mod_php5Upgrade php7-sysvmsgUpgrade php7-snmpUpgrade php5-zlibUpgrade php5-domUpgrade php7-pgsqlUpgrade php53-curlUpgrade php5-xmlwriterUpgrade php7-fastcgiUpgrade php53-domUpgrade php5-gdUpgrade php53-mbstringUpgrade php7-mysqlUpgrade php5-opensslUpgrade php5-socketsUpgrade php7-pharUpgrade php7-mbstringUpgrade php7-fpmUpgrade php5-pgsqlUpgrade php53-tokenizerUpgrade php5-suhosinUpgrade php53-ldapUpgrade php7-bcmathUpgrade php53-bz2Upgrade php7-ctypeUpgrade php7-sysvsemUpgrade php53-wddxUpgrade php53-pgsqlUpgrade php53-soapUpgrade php7-wddxUpgrade php53-jsonUpgrade php5-wddxUpgrade php5-opcacheUpgrade php7-tokenizer | May 10, 2018 | Apr 29, 2018 |
| Ubuntu | — | Upgrade php5-fpmUpgrade php5-cgiUpgrade libapache2-mod-php7.1Upgrade php7.2-cgiUpgrade libapache2-mod-php5Upgrade php7.1-cliUpgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php7.1-cgiUpgrade php7.1-fpmUpgrade php5-cliUpgrade php7.0-fpmUpgrade libapache2-mod-php7.2Upgrade php7.2-cliUpgrade php7.2-fpmUpgrade php7.0-cli | May 23, 2018 | Apr 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub