Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-develUpgrade php-dbaUpgrade php-intlUpgrade php-recodeUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-gdUpgrade php-pearUpgrade apcu-panelUpgrade php-develUpgrade php-xmlUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade php-cliUpgrade php-fpmUpgrade php-mysqlndUpgrade php-gmpUpgrade php-ldapUpgrade php-commonUpgrade php-dbgUpgrade php-opcacheUpgrade php-bcmathUpgrade php-snmpUpgrade phpUpgrade php-odbcUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-embedded | May 4, 2022 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Jun 18, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Jul 27, 2019 | Jun 5, 2019 |
| Centos_linux | — | Upgrade apcu-panelUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-json-debuginfoUpgrade php-pdoUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-embeddedUpgrade libzipUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-fpm-debuginfoUpgrade php-process-debuginfoUpgrade php-ldapUpgrade phpUpgrade php-opcacheUpgrade php-dbgUpgrade php-pdo-debuginfoUpgrade php-mysqlndUpgrade php-soapUpgrade php-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsqlUpgrade php-enchantUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-xml-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-commonUpgrade php-gmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-gdUpgrade php-mbstringUpgrade php-cliUpgrade php-intl-debuginfoUpgrade php-xmlUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-recode-debuginfoUpgrade php-fpmUpgrade php-jsonUpgrade php-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pearUpgrade php-ldap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dbaUpgrade php-gmpUpgrade php-recodeUpgrade php-xmlrpcUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-develUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pecl-rrd | Apr 29, 2020 | Jun 19, 2019 |
| Debian | — | Upgrade php7.3 | Jun 4, 2019 | Jun 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-mysqlUpgrade php-xmlUpgrade php-recodeUpgrade php-cliUpgrade php-gdUpgrade php-xmlrpcUpgrade php-processUpgrade php-pgsqlUpgrade php-ldapUpgrade php-soapUpgrade phpUpgrade php-pdoUpgrade php-odbcUpgrade php-common | Nov 3, 2020 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-recodeUpgrade php-xmlUpgrade php-soapUpgrade phpUpgrade php-gdUpgrade php-cliUpgrade php-pdoUpgrade php-ldapUpgrade php-mysqlUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-processUpgrade php-pgsqlUpgrade php-common | Sep 28, 2020 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-odbcUpgrade php-commonUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-gdUpgrade php-recodeUpgrade php-xmlUpgrade phpUpgrade php-processUpgrade php-cliUpgrade php-ldap | Aug 31, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade php-soapUpgrade phpUpgrade php-dbaUpgrade php-gmpUpgrade php-jsonUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-snmpUpgrade php-enchantUpgrade apcu-panelUpgrade php-cliUpgrade php-gdUpgrade php-processUpgrade php-pecl-rrdUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-intlUpgrade php-pdoUpgrade php-opcacheUpgrade libzipUpgrade php-xmlUpgrade php-recodeUpgrade php-embeddedUpgrade libzip-develUpgrade php-odbcUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade php-fpmUpgrade php-develUpgrade libzip-toolsUpgrade php-pearUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-dbg | Sep 10, 2020 | Jun 18, 2019 |
| Php | — | Upgrade to PHP version 7.1.30Upgrade to PHP version 7.2.19Upgrade to PHP version 7.3.6 | Jun 25, 2019 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade php-gmp-debuginfoUpgrade php-bcmathUpgrade php-soapUpgrade php-fpmUpgrade php-gd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-processUpgrade php-jsonUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-enchantUpgrade php-pecl-rrd-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-gmpUpgrade php-gdUpgrade php-pdo-debuginfoUpgrade libzipUpgrade php-process-debuginfoUpgrade php-develUpgrade php-pdoUpgrade php-pearUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlrpc-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-zipUpgrade php-ldapUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-pecl-apcu-debugsourceUpgrade php-dbg-debuginfoUpgrade php-xml-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-intl-debuginfoUpgrade php-intlUpgrade php-cliUpgrade php-mbstringUpgrade libzip-debuginfoUpgrade libzip-develUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-recode-debuginfoNo solution existsUpgrade php-soap-debuginfoUpgrade php-dbgUpgrade apcu-panelUpgrade php-snmpUpgrade php-recodeUpgrade php-mbstring-debuginfoUpgrade phpUpgrade php-pecl-zip-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-commonUpgrade php-debuginfoUpgrade php-ldap-debuginfo | Apr 29, 2020 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade php-snmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-debugsourceUpgrade php-fpmUpgrade php-commonUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-pecl-apcu-debugsourceUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-jsonUpgrade php-gmpUpgrade php-ldapUpgrade php-xmlUpgrade php-enchant-debuginfoUpgrade php-develUpgrade libzip-develUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade phpUpgrade php-gd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-mysqlnd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-toolsUpgrade php-dbaUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-processUpgrade php-opcache-debuginfoUpgrade libzip-debugsourceUpgrade php-xmlrpcUpgrade php-cliUpgrade php-recodeUpgrade php-enchantUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-pecl-rrd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zip-debugsource | Mar 12, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade php7-sysvshmUpgrade php5-pearUpgrade php5Upgrade php7-pspellUpgrade php72-opensslUpgrade php72-ldapUpgrade php72-iconvUpgrade php72-pcntlUpgrade php5-shmopUpgrade php7-sysvsemUpgrade php72-develUpgrade php72-dbaUpgrade php7-imapUpgrade php72-domUpgrade php7-mbstringUpgrade php72-jsonUpgrade php72-sqliteUpgrade php7-sodiumUpgrade php5-suhosinUpgrade php5-pgsqlUpgrade php5-dbaUpgrade php5-xslUpgrade php5-sysvshmUpgrade php72-pearUpgrade php5-soapUpgrade php5-fileinfoUpgrade php7-fileinfoUpgrade php5-sqliteUpgrade php5-sysvmsgUpgrade php72-calendarUpgrade php72-gdUpgrade php72-sysvshmUpgrade php5-iconvUpgrade php7-xslUpgrade php7-ldapUpgrade php5-pspellUpgrade php5-posixUpgrade php72-xslUpgrade php7-readlineUpgrade php7-testresultsUpgrade php7-ctypeUpgrade php72-wddxUpgrade php7-fastcgiUpgrade php7-calendarUpgrade php72-fileinfoUpgrade php7-opensslUpgrade php5-gdUpgrade php5-tokenizerUpgrade php72-zipUpgrade php5-enchantUpgrade php72-tokenizerUpgrade php5-curlUpgrade php5-fpmUpgrade php5-ldapUpgrade php72-mbstringUpgrade php72-bz2Upgrade php72-pharUpgrade php5-intlUpgrade php7-firebirdUpgrade php5-snmpUpgrade php5-zlibUpgrade php72-intlUpgrade php7-jsonUpgrade apache2-mod_php72Upgrade php5-odbcUpgrade php7-xmlrpcUpgrade php7-dbaUpgrade php5-bcmathUpgrade php5-domUpgrade php72-pdoUpgrade php7-mcryptUpgrade php5-socketsUpgrade php7-pcntlUpgrade php72-shmopUpgrade php5-bz2Upgrade php72-xmlwriterUpgrade php5-xmlrpcUpgrade php7-mysqlUpgrade php5-zipUpgrade php7-gdUpgrade php72-mysqlUpgrade php5-wddxUpgrade php7-opcacheUpgrade php72-curlUpgrade php72-soapUpgrade php72-socketsUpgrade php72-readlineUpgrade php7-fpmUpgrade php7-gettextUpgrade php5-xmlreaderUpgrade php7-snmpUpgrade php7-bz2Upgrade php7-xmlwriterUpgrade apache2-mod_php7Upgrade php7-tokenizerUpgrade php7-sqliteUpgrade php7-zipUpgrade php7Upgrade php72-bcmathUpgrade php7-bcmathUpgrade apache2-mod_php5Upgrade php72-opcacheUpgrade php5-develUpgrade php5-gettextUpgrade php5-pharUpgrade php72-sysvmsgUpgrade php7-shmopUpgrade php5-mcryptUpgrade php7-soapUpgrade php5-exifUpgrade php5-sysvsemUpgrade php72-odbcUpgrade php5-mbstringUpgrade php72-pspellUpgrade php72-imapUpgrade php72-pear-archive_tarUpgrade php72Upgrade php72-exifUpgrade php7-develUpgrade php5-gmpUpgrade php7-pearUpgrade php72-posixUpgrade php72-gettextUpgrade php72-xmlrpcUpgrade php5-xmlwriterUpgrade php7-sysvmsgUpgrade php7-domUpgrade php7-enchantUpgrade php72-snmpUpgrade php72-enchantUpgrade php72-xmlreaderUpgrade php5-ctypeUpgrade php7-curlUpgrade php72-zlibUpgrade php7-pdoUpgrade php72-ctypeUpgrade php7-zlibUpgrade php72-fastcgiUpgrade php5-jsonUpgrade php7-gmpUpgrade php5-calendarUpgrade php7-socketsUpgrade php7-pharUpgrade php5-pdoUpgrade php7-exifUpgrade php7-pgsqlUpgrade php7-wddxUpgrade php72-fpmUpgrade php5-fastcgiUpgrade php72-sysvsemUpgrade php7-odbcUpgrade php7-posixUpgrade php7-ftpUpgrade php5-ftpUpgrade php7-intlUpgrade php72-pgsqlUpgrade php5-pcntlUpgrade php5-opcacheUpgrade php5-opensslUpgrade php5-imapUpgrade php5-mysqlUpgrade php7-iconvUpgrade php72-tidyUpgrade php72-gmpUpgrade php7-pear-archive_tarUpgrade php72-ftpUpgrade php7-xmlreaderUpgrade php7-embedUpgrade php7-tidy | Jul 3, 2019 | Jun 5, 2019 |
| Ubuntu | — | Upgrade php7.2-fpmUpgrade libapache2-mod-php7.0Upgrade php5-cgiUpgrade php7.0-cgiUpgrade php7.0-fpmUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.2-cgiUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-fpmUpgrade libapache2-mod-php7.2Upgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php7.2-cli | Jun 6, 2019 | Jun 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub