In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pearUpgrade php-gmpUpgrade php-snmpUpgrade php-cliUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade php-fpmUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-gdUpgrade php-recodeUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-processUpgrade libzip-develUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade libzipUpgrade php-pdoUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-opcacheUpgrade php-enchantUpgrade php-ldapUpgrade php-soapUpgrade php-dbgUpgrade php-odbcUpgrade php-bcmathUpgrade libzip-toolsUpgrade phpUpgrade php-pecl-zipUpgrade php-common | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php73 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrdUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-cli-debuginfoUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xmlUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade php-dbgUpgrade php-snmpUpgrade php-common-debuginfoUpgrade php-processUpgrade php-debugsourceUpgrade php-recode-debuginfoUpgrade php-recodeUpgrade php-opcache-debuginfoUpgrade php-gmp-debuginfoUpgrade php-dbaUpgrade phpUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade php-cliUpgrade php-intlUpgrade libzip-debuginfoUpgrade php-commonUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mysqlndUpgrade libzip-develUpgrade libzip-toolsUpgrade php-ldapUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchantUpgrade php-soapUpgrade php-pecl-rrd-debuginfoUpgrade php-develUpgrade php-pearUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-enchant-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php-xmlrpcUpgrade php-gdUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-pgsqlUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-fpmUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php-xml-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-mysqlUpgrade php-recodeUpgrade php-gdUpgrade php-cliUpgrade php-processUpgrade php-soapUpgrade php-pgsqlUpgrade phpUpgrade php-commonUpgrade php-ldapUpgrade php-odbc | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-processUpgrade php-recodeUpgrade php-pdoUpgrade php-ldapUpgrade php-gdUpgrade phpUpgrade php-soapUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-commonUpgrade php-cliUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-xml | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-gdUpgrade php-pgsqlUpgrade php-odbcUpgrade php-soapUpgrade phpUpgrade php-processUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-commonUpgrade php-cliUpgrade php-xmlUpgrade php-mysqlUpgrade php-pdoUpgrade php-recode | Feb 24, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlUpgrade php-fpmUpgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade php-pdoUpgrade php-commonUpgrade php-ldapUpgrade php-soapUpgrade php-odbcUpgrade phpUpgrade php-recodeUpgrade php-cli | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade php-snmpUpgrade php-gdUpgrade php-mysqlndUpgrade libzip-develUpgrade php-dbaUpgrade php-processUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-cliUpgrade php-mbstringUpgrade php-develUpgrade php-pdoUpgrade php-embeddedUpgrade php-xmlUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-recodeUpgrade php-opcacheUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-bcmathUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-ldapUpgrade php-intlUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade phpUpgrade php-dbgUpgrade php-odbcUpgrade libzip-tools | Sep 10, 2020 | Dec 22, 2019 |
| Php | — | Upgrade to PHP version 7.2.26Upgrade to PHP version 7.3.13Upgrade to PHP version 7.4.1 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-odbcUpgrade php-pecl-rrd-debugsourceUpgrade php-common-debuginfoUpgrade php-soap-debuginfoUpgrade php-ldapUpgrade php-pecl-rrd-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-cliUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-recodeUpgrade php-xmlrpcUpgrade libzip-debuginfoUpgrade libzip-develUpgrade php-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-dbgUpgrade php-xmlUpgrade php-json-debuginfoUpgrade php-bcmathUpgrade php-pearUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlndUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-snmpUpgrade php-fpmUpgrade php-gdUpgrade php-dbg-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbaUpgrade php-xml-debuginfoUpgrade php-pecl-zipUpgrade php-soapUpgrade php-process-debuginfoUpgrade php-mbstringUpgrade php-pdoUpgrade php-enchantUpgrade php-xmlrpc-debuginfoUpgrade php-processUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-gmpUpgrade php-intlUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsqlUpgrade php-mysqlnd-debuginfoUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-jsonUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade libzip-tools-debuginfoUpgrade php-fpm-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-gmpUpgrade php-xml-debuginfoUpgrade php-xmlUpgrade php-fpmUpgrade php-debugsourceUpgrade php-bcmathUpgrade php-gd-debuginfoUpgrade php-pdoUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfoUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-recodeUpgrade libzipUpgrade php-dbg-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldapUpgrade php-develUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-dbgUpgrade php-cliUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-mbstringUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-gmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade php-odbcUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade php-soapUpgrade php-pgsqlUpgrade php-processUpgrade php-snmpUpgrade php-dba-debuginfoUpgrade libzip-toolsUpgrade php-pecl-rrd-debugsourceUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade libzip-debuginfoUpgrade php-intl-debuginfoUpgrade php-gd | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php72-zipUpgrade php5-posixUpgrade php72-pdoUpgrade php5-gdUpgrade php53-xslUpgrade php5-pspellUpgrade php7-mcryptUpgrade php5-curlUpgrade php72-pearUpgrade php72-posixUpgrade php72-fastcgiUpgrade php72-jsonUpgrade php72-calendarUpgrade php7-fastcgiUpgrade php53-bcmathUpgrade php72-dbaUpgrade php72-sqliteUpgrade php5-xslUpgrade php72-shmopUpgrade php5Upgrade php5-fileinfoUpgrade php7-snmpUpgrade php72-pharUpgrade php72-sysvmsgUpgrade php53-xmlrpcUpgrade php7-calendarUpgrade php72-mysqlUpgrade php7-tokenizerUpgrade php72-intlUpgrade php7-jsonUpgrade php7-wddxUpgrade php5-enchantUpgrade php5-calendarUpgrade php7-ctypeUpgrade php72-fpmUpgrade php53-sysvsemUpgrade php5-pcntlUpgrade php72-imapUpgrade php5-opensslUpgrade php5-sysvshmUpgrade php72-gdUpgrade php7-pspellUpgrade php53-mcryptUpgrade php7-pharUpgrade php72-opensslUpgrade php7-enchantUpgrade php5-pgsqlUpgrade php53-mysqlUpgrade php5-sysvmsgUpgrade php72-mbstringUpgrade php5-socketsUpgrade php53-tokenizerUpgrade php7-xmlwriterUpgrade php5-mysqlUpgrade php72-tokenizerUpgrade php53-domUpgrade php72-curlUpgrade php7-fileinfoUpgrade php5-develUpgrade php5-fpmUpgrade php5-odbcUpgrade php5-sqliteUpgrade php7-sysvshmUpgrade php7-pcntlUpgrade php7-mbstringUpgrade php5-pearUpgrade php5-dbaUpgrade php72-wddxUpgrade php53-fileinfoUpgrade apache2-mod_php72Upgrade php53-soapUpgrade php7-bcmathUpgrade php72-socketsUpgrade php72-pcntlUpgrade php7-sysvsemUpgrade php7-opensslUpgrade php5-tokenizerUpgrade php72-ldapUpgrade php72-develUpgrade php72-bz2Upgrade php5-shmopUpgrade php53-jsonUpgrade php5-ldapUpgrade php7-intlUpgrade php5-suhosinUpgrade php72-xslUpgrade php5-intlUpgrade php5-bcmathUpgrade php7-curlUpgrade php5-fastcgiUpgrade php5-zlibUpgrade php72-soapUpgrade php53-calendarUpgrade php53-intlUpgrade php53-pgsqlUpgrade php72-domUpgrade php72-pspellUpgrade php53-ldapUpgrade php53-sysvshmUpgrade apache2-mod_php5Upgrade php53Upgrade php5-bz2Upgrade php72-ctypeUpgrade php53-dbaUpgrade php7-zipUpgrade php7-sysvmsgUpgrade php53-xmlreaderUpgrade php53-curlUpgrade php5-jsonUpgrade php72-pear-archive_tarUpgrade php5-soapUpgrade php7-develUpgrade php53-pdoUpgrade php7-pgsqlUpgrade php53-gmpUpgrade php72-gmpUpgrade php7-pdoUpgrade php72-snmpUpgrade php72-xmlwriterUpgrade php7-ftpUpgrade php53-suhosinUpgrade php72-sysvsemUpgrade php7-ldapUpgrade php7-iconvUpgrade php7-domUpgrade php7-imapUpgrade php7-pear-archive_tarUpgrade php53-wddxUpgrade php53-exifUpgrade php5-pharUpgrade php5-gmpUpgrade php53-xmlwriterUpgrade php5-imapUpgrade php72Upgrade php5-xmlreaderUpgrade php7-gdUpgrade php5-opcacheUpgrade php72-exifUpgrade php7-zlibUpgrade php72-xmlrpcUpgrade php72-gettextUpgrade php72-sodiumUpgrade php72-enchantUpgrade php7-tidyUpgrade php7Upgrade php7-odbcUpgrade php7-firebirdUpgrade php53-fastcgiUpgrade php53-snmpUpgrade php53-pearUpgrade php7-opcacheUpgrade php72-iconvUpgrade php5-sysvsemUpgrade php72-fileinfoUpgrade php7-bz2Upgrade php72-bcmathUpgrade php72-zlibUpgrade php53-zlibUpgrade php5-wddxUpgrade php53-iconvUpgrade php5-ftpUpgrade php53-pcntlUpgrade php5-snmpUpgrade php7-socketsUpgrade php5-ctypeUpgrade php53-shmopUpgrade php7-gmpUpgrade php53-mbstringUpgrade php7-testUpgrade php7-xmlrpcUpgrade php5-iconvUpgrade php5-gettextUpgrade php7-fpmUpgrade php7-posixUpgrade php5-pdoUpgrade php7-gettextUpgrade php5-mbstringUpgrade php72-opcacheUpgrade php5-mcryptUpgrade php53-sysvmsgUpgrade php53-ftpUpgrade php53-odbcUpgrade apache2-mod_php53Upgrade php5-xmlrpcUpgrade php7-embedUpgrade php7-dbaUpgrade php7-readlineUpgrade php5-xmlwriterUpgrade php53-bz2Upgrade php5-domUpgrade php53-pspellUpgrade php53-ctypeUpgrade php7-exifUpgrade php72-tidyUpgrade php72-sysvshmUpgrade apache2-mod_php7Upgrade php72-pgsqlUpgrade php7-xslUpgrade php7-sodiumUpgrade php72-odbcUpgrade php72-xmlreaderUpgrade php7-sqliteUpgrade php7-pearUpgrade php5-exifUpgrade php7-mysqlUpgrade php53-gettextUpgrade php7-shmopUpgrade php72-readlineUpgrade php53-zipUpgrade php53-opensslUpgrade php72-ftpUpgrade php7-soapUpgrade php5-zipUpgrade php53-gdUpgrade php7-xmlreader | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade php7.2-xmlrpcUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php7.0-xmlrpcUpgrade php7.3-xmlrpcUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-xmlrpcUpgrade php7.2-cgiUpgrade php7.0-cliUpgrade php7.3-cliUpgrade libapache2-mod-php7.0Upgrade php7.0-fpmUpgrade php7.0-bcmathUpgrade php7.2-mbstringUpgrade php7.0-cgiUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade php7.3-cgiUpgrade php5-cli (Ubuntu Pro)Upgrade php7.3-fpmUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php7.3Upgrade php7.3-mbstringUpgrade php7.0-mbstringUpgrade libapache2-mod-php5Upgrade php5-fpmUpgrade php7.2-bcmathUpgrade libapache2-mod-php7.2Upgrade php7.3-bcmathUpgrade php5-cgiUpgrade php5-cliUpgrade php7.2-cli | Jan 16, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub