The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-embeddedUpgrade apcu-panelUpgrade php-odbcUpgrade php-dbgUpgrade phpUpgrade php-soapUpgrade php-ldapUpgrade php-commonUpgrade php-opcacheUpgrade php-pgsqlUpgrade php-dbaUpgrade php-intlUpgrade libzipUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-jsonUpgrade php-bcmathUpgrade php-develUpgrade php-mbstringUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-xmlrpcUpgrade php-processUpgrade php-cliUpgrade libzip-develUpgrade php-fpmUpgrade php-pearUpgrade php-recodeUpgrade php-gmpUpgrade php-pdoUpgrade php-snmpUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade php-gdUpgrade php-enchant | May 4, 2022 | Feb 21, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 21, 2019 |
| Centos_linux | — | Upgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-debuginfoUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-cliUpgrade libzip-develUpgrade php-xmlUpgrade apcu-panelUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-mbstringUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-recode-debuginfoUpgrade php-pearUpgrade php-mysqlndUpgrade phpUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-develUpgrade php-common-debuginfoUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-commonUpgrade php-bcmath-debuginfoUpgrade php-json-debuginfoUpgrade php-embeddedUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-gd-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debugsourceUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-debugsourceUpgrade libzip-debugsourceUpgrade php-enchantUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-gdUpgrade php-jsonUpgrade php-dba-debuginfoUpgrade libzipUpgrade php-xml-debuginfoUpgrade php-cli-debuginfoUpgrade php-intl-debuginfoUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-gmpUpgrade php-pgsqlUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-toolsUpgrade php-pdo-debuginfoUpgrade php-bcmathUpgrade php-ldap-debuginfo | Apr 29, 2020 | Feb 21, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 21, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-cliUpgrade php-pdoUpgrade phpUpgrade php-recodeUpgrade php-gdUpgrade php-ldapUpgrade php-odbcUpgrade php-processUpgrade php-mysqlUpgrade php-xmlUpgrade php-soapUpgrade php-commonUpgrade php-pgsqlUpgrade php-xmlrpc | Apr 2, 2019 | Feb 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-processUpgrade php-soapUpgrade php-ldapUpgrade php-cliUpgrade php-recodeUpgrade php-pdoUpgrade phpUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-xmlUpgrade php-odbcUpgrade php-commonUpgrade php-mysql | Mar 27, 2019 | Feb 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-gdUpgrade php-soapUpgrade phpUpgrade php-processUpgrade php-pgsqlUpgrade php-odbcUpgrade php-pdoUpgrade php-mysqlUpgrade php-ldapUpgrade php-xmlUpgrade php-cliUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-common | Apr 3, 2019 | Feb 21, 2019 |
| Oracle_linux | — | Upgrade php-opcacheUpgrade php-pearUpgrade php-xmlrpcUpgrade php-dbgUpgrade php-mysqlndUpgrade phpUpgrade php-pecl-apcuUpgrade php-odbcUpgrade apcu-panelUpgrade php-commonUpgrade php-recodeUpgrade libzip-develUpgrade libzip-toolsUpgrade php-cliUpgrade php-snmpUpgrade php-xmlUpgrade php-mbstringUpgrade php-dbaUpgrade php-embeddedUpgrade php-enchantUpgrade php-develUpgrade php-fpmUpgrade php-gdUpgrade php-ldapUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade libzipUpgrade php-jsonUpgrade php-intlUpgrade php-gmpUpgrade php-pgsqlUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-bcmath | Jul 22, 2024 | Nov 12, 2018 |
| Php | — | Upgrade to PHP version 7.2.13Upgrade to PHP version 5.6.39Upgrade to PHP version 7.1.25 | Feb 25, 2019 | Feb 21, 2019 |
| Redhat_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-develUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-bcmathUpgrade php-recodeUpgrade php-mysqlndUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-soapUpgrade phpUpgrade php-pgsql-debuginfoUpgrade php-embeddedUpgrade php-opcacheUpgrade php-processUpgrade php-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-enchantUpgrade php-dbaUpgrade php-gmpUpgrade php-recode-debuginfoUpgrade libzipUpgrade php-cliUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-fpmUpgrade php-gd-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade apcu-panelUpgrade php-gmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-opcache-debuginfoUpgrade php-soap-debuginfoNo solution existsUpgrade libzip-debuginfoUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsqlUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-pearUpgrade php-xml | Apr 29, 2020 | Feb 21, 2019 |
| Rocky_linux | — | Upgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-cliUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-enchant-debuginfoUpgrade libzip-develUpgrade php-mbstringUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-debuginfoUpgrade php-develUpgrade php-xmlrpcUpgrade php-recode-debuginfoUpgrade php-debuginfoUpgrade php-processUpgrade phpUpgrade php-gd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-bcmath-debuginfoUpgrade php-ldapUpgrade php-pdoUpgrade php-soapUpgrade php-intlUpgrade php-snmp-debuginfoUpgrade php-odbcUpgrade libzip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-gmpUpgrade libzip-toolsUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php-xmlrpc-debuginfoUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-fpm-debuginfoUpgrade php-json-debuginfoUpgrade php-pgsqlUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade php-odbc-debuginfoUpgrade php-dbaUpgrade php-commonUpgrade libzipUpgrade php-pgsql-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-gd | Mar 12, 2024 | Feb 21, 2019 |
| Suse | — | Upgrade php72-fastcgiUpgrade php7-sysvmsgUpgrade php72-zlibUpgrade php53-fileinfoUpgrade libmemcachedutil2Upgrade php7-tokenizerUpgrade php72-xslUpgrade php53-ldapUpgrade php72-xmlwriterUpgrade php53-jsonUpgrade php5-fastcgiUpgrade php72-pearUpgrade libmemcachedUpgrade libtidy-0_99-0-develUpgrade php53-socketsUpgrade php53-suhosinUpgrade php53-readlineUpgrade php72-zipUpgrade php53-sysvsemUpgrade php72-sysvmsgUpgrade php53-pdoUpgrade php53-ctypeUpgrade php5-gmpUpgrade php5-ftpUpgrade php7-gettextUpgrade php7-exifUpgrade php53-imapUpgrade php53-wddxUpgrade libmemcached11Upgrade php5-iconvUpgrade php72-xmlreaderUpgrade php7-wddxUpgrade php7-opensslUpgrade php53-soapUpgrade php5-sysvsemUpgrade php7-fpmUpgrade php72-pdoUpgrade php72-curlUpgrade php5-pdoUpgrade php7-gmpUpgrade php7-bcmathUpgrade php72-pspellUpgrade php7-domUpgrade php72-pgsqlUpgrade php5-wddxUpgrade php72-shmopUpgrade php5-develUpgrade php7-imapUpgrade php53-calendarUpgrade php53-iconvUpgrade php7-jsonUpgrade php7-posixUpgrade php5-ldapUpgrade php53-sysvshmUpgrade php5-gettextUpgrade php53-tidyUpgrade php53-shmopUpgrade php7-soapUpgrade php7-xmlrpcUpgrade php72-snmpUpgrade php5-xslUpgrade php53-ftpUpgrade php5-pharUpgrade php72Upgrade php5-jsonUpgrade php72-readlineUpgrade php7-pdoUpgrade php53-develUpgrade php53-sysvmsgUpgrade php72-tokenizerUpgrade php7-dbaUpgrade php7-mcryptUpgrade php53-mbstringUpgrade php5-domUpgrade php72-odbcUpgrade php5-intlUpgrade php5-suhosinUpgrade php7-pharUpgrade php72-bz2Upgrade php53-odbcUpgrade php7-snmpUpgrade libmemcached-develUpgrade php5-bcmathUpgrade php7-mbstringUpgrade php53-mcryptUpgrade php7-intlUpgrade php53-gdUpgrade php7-ftpUpgrade php72-fileinfoUpgrade php5-mcryptUpgrade php7-curlUpgrade php5-zipUpgrade php5Upgrade php7-tidyUpgrade php53-curlUpgrade php5-xmlrpcUpgrade php7-readlineUpgrade php53-sqliteUpgrade php7-enchantUpgrade php5-imapUpgrade php7-xmlreaderUpgrade php72-mysqlUpgrade php7-pgsqlUpgrade php72-domUpgrade php72-sqliteUpgrade php7-xmlwriterUpgrade php7-fileinfoUpgrade php7-embedUpgrade php5-sysvmsgUpgrade php5-xmlreaderUpgrade php5-socketsUpgrade php5-mysqlUpgrade php72-bcmathUpgrade apache2-mod_php7Upgrade php5-opensslUpgrade php7-pcntlUpgrade php5-pearUpgrade php72-fpmUpgrade php7-gdUpgrade php7Upgrade php7-xslUpgrade php53-exifUpgrade php7-firebirdUpgrade php5-gdUpgrade php53-gmpUpgrade php7-sqliteUpgrade php5-snmpUpgrade php53-posixUpgrade php72-sysvsemUpgrade php72-enchantUpgrade php53-bcmathUpgrade php72-gdUpgrade php72-socketsUpgrade php5-dbaUpgrade php72-sysvshmUpgrade php5-pcntlUpgrade php72-ftpUpgrade php72-posixUpgrade php7-develUpgrade libtidy-0_99-0Upgrade php53-pspellUpgrade php7-fastcgiUpgrade php53-dbaUpgrade php7-zipUpgrade php53-fastcgiUpgrade php53-opensslUpgrade php7-pspellUpgrade php72-pear-archive_tarUpgrade php7-socketsUpgrade php53-bz2Upgrade php5-enchantUpgrade php72-opcacheUpgrade php7-mysqlUpgrade php53-xmlwriterUpgrade php5-curlUpgrade php5-sysvshmUpgrade php5-ctypeUpgrade php5-fileinfoUpgrade php7-zlibUpgrade php53-tokenizerUpgrade php72-develUpgrade php5-shmopUpgrade php7-testresultsUpgrade php53-intlUpgrade php7-sysvsemUpgrade php7-sysvshmUpgrade php7-pearUpgrade apache2-mod_php5Upgrade php5-bz2Upgrade php72-pharUpgrade php72-ldapUpgrade php53-xmlreaderUpgrade php72-iconvUpgrade php53-xslUpgrade php72-wddxUpgrade php5-posixUpgrade php5-pgsqlUpgrade php72-intlUpgrade php7-bz2Upgrade php53-gettextUpgrade php5-xmlwriterUpgrade php53-mysqlUpgrade php5-calendarUpgrade php5-tokenizerUpgrade php53-zlibUpgrade tidyUpgrade php72-dbaUpgrade php72-jsonUpgrade php7-ldapUpgrade php72-exifUpgrade php72-ctypeUpgrade php5-odbcUpgrade php7-opcacheUpgrade php53-domUpgrade php5-fpmUpgrade php5-zlibUpgrade php72-gmpUpgrade php53Upgrade php72-mbstringUpgrade php7-shmopUpgrade php7-odbcUpgrade php72-soapUpgrade php72-calendarUpgrade php5-mbstringUpgrade php5-pspellUpgrade php5-exifUpgrade php72-opensslUpgrade php53-zipUpgrade php7-calendarUpgrade apache2-mod_php53Upgrade php53-pearUpgrade php72-gettextUpgrade php5-opcacheUpgrade php72-imapUpgrade php72-xmlrpcUpgrade php72-tidyUpgrade php7-sodiumUpgrade php5-soapUpgrade php72-memcachedUpgrade php7-iconvUpgrade php5-sqliteUpgrade php7-pear-archive_tarUpgrade php53-pgsqlUpgrade php53-pcntlUpgrade php53-xmlrpcUpgrade apache2-mod_php72Upgrade php72-pcntlUpgrade php7-ctypeUpgrade php53-snmp | Apr 6, 2019 | Feb 21, 2019 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-fpmUpgrade php5-cli (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cliUpgrade libapache2-mod-php5 | May 23, 2019 | Feb 21, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub