The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-fpmUpgrade php-opcacheUpgrade php-bcmathUpgrade php-pdoUpgrade php-odbcUpgrade libzipUpgrade php-snmpUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pgsqlUpgrade php-cliUpgrade apcu-panelUpgrade php-develUpgrade php-commonUpgrade php-mysqlndUpgrade php-ldapUpgrade php-dbgUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-pearUpgrade phpUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-recodeUpgrade php-gdUpgrade libzip-develUpgrade php-enchantUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-processUpgrade php-intlUpgrade php-dba | May 4, 2022 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Jun 18, 2019 |
| Amazon_linux | — | Upgrade php71Upgrade php72Upgrade php73 | Jul 27, 2019 | Jun 5, 2019 |
| Centos_linux | — | Upgrade php-pecl-apcuUpgrade php-gd-debuginfoUpgrade libzip-develUpgrade php-common-debuginfoUpgrade php-ldapUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-toolsUpgrade php-pecl-rrd-debugsourceUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade php-pdo-debuginfoUpgrade php-enchantUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade php-pdoUpgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade php-opcacheUpgrade phpUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-soapUpgrade php-intlUpgrade php-bcmathUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-gdUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-recode-debuginfoUpgrade php-recodeUpgrade php-cliUpgrade php-debuginfoUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-snmpUpgrade php-pearUpgrade php-dbg-debuginfoUpgrade php-jsonUpgrade php-gmpUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade libzip-tools-debuginfoUpgrade php-ldap-debuginfoUpgrade php-processUpgrade php-snmp-debuginfo | Apr 29, 2020 | Jun 19, 2019 |
| Debian | — | Upgrade php7.3 | Jun 4, 2019 | Jun 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-processUpgrade php-xmlUpgrade php-mysqlUpgrade php-gdUpgrade php-cliUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-pdoUpgrade php-odbcUpgrade phpUpgrade php-soapUpgrade php-ldapUpgrade php-common | Nov 3, 2020 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-odbcUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-xmlUpgrade php-pdoUpgrade phpUpgrade php-ldapUpgrade php-cliUpgrade php-soapUpgrade php-gdUpgrade php-recodeUpgrade php-commonUpgrade php-processUpgrade php-xmlrpc | Sep 28, 2020 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlrpcUpgrade php-gdUpgrade php-soapUpgrade php-odbcUpgrade php-pdoUpgrade php-commonUpgrade php-fpmUpgrade phpUpgrade php-cliUpgrade php-recodeUpgrade php-processUpgrade php-xmlUpgrade php-ldap | Aug 31, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade php-pdoUpgrade php-enchantUpgrade phpUpgrade php-dbaUpgrade php-snmpUpgrade php-jsonUpgrade php-gdUpgrade php-mysqlndUpgrade php-processUpgrade php-gmpUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade libzip-develUpgrade php-embeddedUpgrade libzipUpgrade php-bcmathUpgrade php-cliUpgrade php-ldapUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-dbgUpgrade php-xmlrpcUpgrade php-develUpgrade php-pgsqlUpgrade php-fpmUpgrade php-commonUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-odbc | Sep 10, 2020 | Jun 18, 2019 |
| Php | — | Upgrade to PHP version 7.2.19Upgrade to PHP version 7.1.30Upgrade to PHP version 7.3.6 | Jun 25, 2019 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade php-xml-debuginfoUpgrade php-gdUpgrade php-embedded-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-debugsourceUpgrade php-bcmathUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zipUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-cli-debuginfoUpgrade php-dbaUpgrade libzipUpgrade php-pecl-rrdUpgrade php-ldapUpgrade php-xmlrpc-debuginfoUpgrade php-pearUpgrade libzip-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-pgsqlUpgrade php-enchantUpgrade php-jsonUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-process-debuginfoUpgrade php-soapUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade php-pecl-apcu-debugsourceUpgrade php-gmp-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbg-debuginfoUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade phpUpgrade php-dba-debuginfoUpgrade php-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-pecl-rrd-debugsourceUpgrade apcu-panelUpgrade php-soap-debuginfoUpgrade php-mbstringUpgrade libzip-develUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-dbgUpgrade php-intl-debuginfoUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-mysqlndUpgrade php-commonUpgrade php-recodeNo solution existsUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-cli | Apr 29, 2020 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-pecl-xdebug-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-embeddedUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-enchant-debuginfoUpgrade phpUpgrade php-gmpUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-mbstring-debuginfoUpgrade php-debugsourceUpgrade php-pdoUpgrade php-fpmUpgrade php-pdo-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-pgsql-debuginfoUpgrade php-xmlUpgrade php-snmpUpgrade php-dbgUpgrade libzip-develUpgrade php-develUpgrade php-soapUpgrade php-pecl-rrd-debuginfoUpgrade php-opcacheUpgrade php-enchantUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-embedded-debuginfoUpgrade php-process-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-tools-debuginfoUpgrade libzip-toolsUpgrade php-dbaUpgrade php-recode-debuginfoUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-recodeUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-gdUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-process | Mar 12, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade php7-xmlreaderUpgrade php7-socketsUpgrade php72-readlineUpgrade php7-gmpUpgrade php72-xmlrpcUpgrade php72-sysvmsgUpgrade php72-ctypeUpgrade apache2-mod_php7Upgrade php5-zipUpgrade php72-xmlreaderUpgrade php5-ctypeUpgrade php7-zlibUpgrade php7-gdUpgrade php5-pharUpgrade php7-domUpgrade php7-iconvUpgrade php5-pdoUpgrade php7-curlUpgrade php5-sysvsemUpgrade php7-pharUpgrade php5-jsonUpgrade php7-soapUpgrade php5-xmlwriterUpgrade php5-calendarUpgrade php72-fastcgiUpgrade php72-exifUpgrade php7-gettextUpgrade php7-shmopUpgrade php72-sysvsemUpgrade php72-gmpUpgrade php7-pgsqlUpgrade php7-tidyUpgrade php5-xmlreaderUpgrade php7-bz2Upgrade php72-mysqlUpgrade php72-ftpUpgrade php7-pearUpgrade php7-fpmUpgrade php72-fpmUpgrade php7-snmpUpgrade php7-tokenizerUpgrade php7-opcacheUpgrade php7-exifUpgrade php5-exifUpgrade php7-sqliteUpgrade php5-fastcgiUpgrade php72-xmlwriterUpgrade php7Upgrade php5-develUpgrade php72-curlUpgrade php7-pear-archive_tarUpgrade php72-tidyUpgrade php7-odbcUpgrade php5-mbstringUpgrade php72-enchantUpgrade php5-mcryptUpgrade php7-sysvmsgUpgrade php5-wddxUpgrade php5-xmlrpcUpgrade php7-pdoUpgrade php72-snmpUpgrade php7-enchantUpgrade php5-imapUpgrade php5-gmpUpgrade php5-gettextUpgrade php72-zlibUpgrade php7-develUpgrade php72-pspellUpgrade php72-gettextUpgrade php7-mysqlUpgrade php72-imapUpgrade php72-posixUpgrade php72-pear-archive_tarUpgrade php72-soapUpgrade apache2-mod_php5Upgrade php72-socketsUpgrade php7-zipUpgrade php7-posixUpgrade php7-ftpUpgrade php72-pgsqlUpgrade php72Upgrade php72-odbcUpgrade php5-mysqlUpgrade php7-intlUpgrade php7-bcmathUpgrade php5-opensslUpgrade php72-opcacheUpgrade php5-opcacheUpgrade php72-bcmathUpgrade php5-pcntlUpgrade php7-embedUpgrade php5-ftpUpgrade php7-wddxUpgrade php7-xmlwriterUpgrade php5-intlUpgrade php72-pcntlUpgrade php72-opensslUpgrade php72-ldapUpgrade php5Upgrade php7-mbstringUpgrade php7-sysvshmUpgrade php72-mbstringUpgrade php72-fileinfoUpgrade php5-fileinfoUpgrade php72-xslUpgrade php72-zipUpgrade php7-fastcgiUpgrade php7-calendarUpgrade php5-domUpgrade php5-shmopUpgrade php72-shmopUpgrade php72-sqliteUpgrade php7-testresultsUpgrade php72-dbaUpgrade php72-develUpgrade php5-soapUpgrade php7-imapUpgrade php5-pearUpgrade php7-fileinfoUpgrade php5-pgsqlUpgrade php72-domUpgrade php5-dbaUpgrade php5-socketsUpgrade php5-bz2Upgrade php7-pcntlUpgrade php72-intlUpgrade php5-odbcUpgrade php5-sysvshmUpgrade php7-jsonUpgrade php5-xslUpgrade php7-xmlrpcUpgrade php7-dbaUpgrade php5-suhosinUpgrade apache2-mod_php72Upgrade php72-bz2Upgrade php5-zlibUpgrade php5-bcmathUpgrade php5-pspellUpgrade php72-gdUpgrade php72-sysvshmUpgrade php72-calendarUpgrade php5-sysvmsgUpgrade php5-iconvUpgrade php7-ldapUpgrade php5-posixUpgrade php5-tokenizerUpgrade php5-gdUpgrade php5-fpmUpgrade php72-jsonUpgrade php5-sqliteUpgrade php5-snmpUpgrade php5-curlUpgrade php7-sodiumUpgrade php7-firebirdUpgrade php5-ldapUpgrade php5-enchantUpgrade php7-ctypeUpgrade php72-wddxUpgrade php72-tokenizerUpgrade php7-readlineUpgrade php7-mcryptUpgrade php7-opensslUpgrade php72-pdoUpgrade php7-xslUpgrade php72-pearUpgrade php7-pspellUpgrade php72-iconvUpgrade php72-pharUpgrade php7-sysvsem | Jul 3, 2019 | Jun 5, 2019 |
| Ubuntu | — | Upgrade php7.2-cliUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php5-cli (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpmUpgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php7.2-fpmUpgrade libapache2-mod-php5Upgrade php7.0-cgiUpgrade php5-cliUpgrade php7.2-cgiUpgrade php7.0-cliUpgrade php5-cgi | Jun 6, 2019 | Jun 5, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub