An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbgUpgrade php-odbcUpgrade php-ldapUpgrade php-gmpUpgrade php-develUpgrade php-commonUpgrade php-soapUpgrade php-dbaUpgrade php-jsonUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-mbstringUpgrade php-pecl-apcuUpgrade php-pdoUpgrade libzipUpgrade php-pearUpgrade libzip-toolsUpgrade php-recodeUpgrade php-snmpUpgrade php-mysqlndUpgrade php-xmlUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-opcacheUpgrade php-enchantUpgrade phpUpgrade php-gdUpgrade libzip-develUpgrade php-cliUpgrade php-processUpgrade php-fpmUpgrade apcu-panelUpgrade php-xmlrpc | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-enchantUpgrade php-pgsql-debuginfoUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-pecl-apcu-debuginfoUpgrade libzip-toolsUpgrade php-xmlrpc-debuginfoUpgrade apcu-panelUpgrade php-dbg-debuginfoUpgrade php-recodeUpgrade php-mysqlndUpgrade libzip-tools-debuginfoUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-intlUpgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-develUpgrade php-bcmath-debuginfoUpgrade php-recode-debuginfoUpgrade php-dbaUpgrade php-ldapUpgrade php-xmlUpgrade php-embeddedUpgrade php-soapUpgrade php-snmpUpgrade phpUpgrade php-bcmathUpgrade libzipUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-cliUpgrade php-soap-debuginfoUpgrade php-processUpgrade php-pecl-zip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-jsonUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-commonUpgrade php-pecl-zip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-cli-debuginfoUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-develUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-json-debuginfoUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php-odbcUpgrade php-mysqlnd-debuginfoUpgrade php-pearUpgrade php-pgsqlUpgrade php-xml-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-process-debuginfoUpgrade php-common-debuginfo | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-cliUpgrade php-xmlUpgrade php-processUpgrade php-pdoUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-gdUpgrade php-recodeUpgrade php-odbcUpgrade php-soapUpgrade php-commonUpgrade php-pgsqlUpgrade php-ldapUpgrade php | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pdoUpgrade php-ldapUpgrade php-odbcUpgrade php-gdUpgrade php-mysqlUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-xmlUpgrade php-recodeUpgrade php-commonUpgrade php-processUpgrade php-cliUpgrade php | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-cliUpgrade php-soapUpgrade phpUpgrade php-xmlrpcUpgrade php-processUpgrade php-ldapUpgrade php-gdUpgrade php-pdoUpgrade php-recodeUpgrade php-xmlUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-odbcUpgrade php-common | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-cliUpgrade php-develUpgrade php-enchantUpgrade phpUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-gdUpgrade libzip-develUpgrade libzipUpgrade php-opcacheUpgrade php-embeddedUpgrade php-recodeUpgrade php-mysqlndUpgrade php-processUpgrade php-pearUpgrade php-snmpUpgrade php-fpmUpgrade php-bcmathUpgrade php-odbcUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-dbgUpgrade php-soapUpgrade php-pgsqlUpgrade php-commonUpgrade php-pdoUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-ldapUpgrade apcu-panelUpgrade php-jsonUpgrade php-dba | Jul 22, 2024 | Dec 6, 2018 |
| Php | — | Upgrade to PHP version 7.2.14Upgrade to PHP version 7.3.1Upgrade to PHP version 5.6.40 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-develUpgrade php-jsonUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-soapNo solution existsUpgrade php-pecl-zip-debuginfoUpgrade php-pgsqlUpgrade php-embedded-debuginfoUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-cli-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade libzipUpgrade php-ldapUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-dbgUpgrade php-xmlrpc-debuginfoUpgrade php-enchantUpgrade php-snmp-debuginfoUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-cliUpgrade php-intlUpgrade php-dbg-debuginfoUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade apcu-panelUpgrade php-soap-debuginfoUpgrade php-dbaUpgrade phpUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-odbcUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-intl-debuginfoUpgrade php-recode-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-process-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-recodeUpgrade libzip-toolsUpgrade libzip-devel | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-soap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade phpUpgrade php-embeddedUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-gdUpgrade php-snmpUpgrade libzipUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade libzip-toolsUpgrade php-recode-debuginfoUpgrade php-cliUpgrade php-gd-debuginfoUpgrade php-recodeUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-xmlUpgrade php-mysqlndUpgrade php-processUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-jsonUpgrade php-dbgUpgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-zipUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-odbcUpgrade php-gmpUpgrade php-fpm-debuginfoUpgrade php-ldapUpgrade php-dbaUpgrade php-mbstring-debuginfoUpgrade php-soapUpgrade php-snmp-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-commonUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-intlUpgrade php-cli-debuginfo | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php5-enchantUpgrade php7-dbaUpgrade php53-mysqlUpgrade php72-enchantUpgrade php53-tokenizerUpgrade php72-calendarUpgrade php7-pear-archive_tarUpgrade php72-ctypeUpgrade php72-pspellUpgrade php7-enchantUpgrade php5-pspellUpgrade apache2-mod_php72Upgrade php5-opcacheUpgrade php7-shmopUpgrade libtidy-0_99-0Upgrade php7-pearUpgrade php53-intlUpgrade php72-intlUpgrade php53-xmlwriterUpgrade php5-suhosinUpgrade php7-sysvsemUpgrade php72-gdUpgrade php5-ctypeUpgrade php5-gdUpgrade php53-gmpUpgrade php7-readlineUpgrade php7-fastcgiUpgrade php5-sqliteUpgrade php7-socketsUpgrade php5-fpmUpgrade php7-odbcUpgrade php7-xmlwriterUpgrade php72-ldapUpgrade php7-zipUpgrade php72-socketsUpgrade php7-wddxUpgrade php72-soapUpgrade php72-opensslUpgrade php53-develUpgrade php7-ldapUpgrade php53-pspellUpgrade php5-sysvshmUpgrade php7-calendarUpgrade php53-xmlrpcUpgrade php7-mcryptUpgrade php5-pgsqlUpgrade php5-domUpgrade php5-ldapUpgrade php72-opcacheUpgrade php5-fileinfoUpgrade php53-domUpgrade php53-pearUpgrade php5-exifUpgrade php7-snmpUpgrade php5-mbstringUpgrade php5-iconvUpgrade php72-iconvUpgrade libmemcachedutil2Upgrade libmemcached11Upgrade php5-odbcUpgrade php7-tokenizerUpgrade php53-fastcgiUpgrade php5-shmopUpgrade php5-tokenizerUpgrade php7-ctypeUpgrade php7-pharUpgrade php72-pear-archive_tarUpgrade php72-gettextUpgrade php7-sqliteUpgrade php53-dbaUpgrade php72-pharUpgrade php7-zlibUpgrade php7-develUpgrade tidyUpgrade php53-bz2Upgrade php7-opcacheUpgrade php53-xslUpgrade php5-posixUpgrade apache2-mod_php53Upgrade php72-tidyUpgrade php72-memcachedUpgrade php5-intlUpgrade php5-dbaUpgrade php7-sysvshmUpgrade php72-gmpUpgrade php7-mysqlUpgrade php72-fastcgiUpgrade php53-pcntlUpgrade php53-jsonUpgrade php7-pspellUpgrade php53-opensslUpgrade php72-mbstringUpgrade php72-wddxUpgrade php5-zlibUpgrade php53Upgrade php5-curlUpgrade php72-pcntlUpgrade php7-fileinfoUpgrade php72-ftpUpgrade php72-jsonUpgrade php72-dbaUpgrade php53-exifUpgrade php7-bcmathUpgrade php7-testresultsUpgrade php72-develUpgrade php5-pearUpgrade php7-iconvUpgrade php53-bcmathUpgrade php7-curlUpgrade php72-curlUpgrade php72-pgsqlUpgrade php72-xmlrpcUpgrade php5-snmpUpgrade php7-xmlrpcUpgrade php53-zlibUpgrade php53-ftpUpgrade php53-mbstringUpgrade php53-sysvsemUpgrade php72-sysvsemUpgrade php53-curlUpgrade php53-calendarUpgrade php5-soapUpgrade php72-bcmathUpgrade php53-iconvUpgrade php7-pdoUpgrade php72-zlibUpgrade php5-bcmathUpgrade php53-mcryptUpgrade php5-sysvsemUpgrade php53-posixUpgrade php72-fpmUpgrade php72-pearUpgrade php7-tidyUpgrade php72-sysvshmUpgrade php7-xslUpgrade php5-pharUpgrade php5-bz2Upgrade php7-sysvmsgUpgrade php53-xmlreaderUpgrade php72-bz2Upgrade php5-xmlrpcUpgrade php5-wddxUpgrade php53-zipUpgrade php53-gdUpgrade php5-pdoUpgrade php5-gettextUpgrade php5-calendarUpgrade php53-gettextUpgrade php53-ldapUpgrade php53-pgsqlUpgrade php53-pdoUpgrade php5-zipUpgrade php72-sqliteUpgrade php72-xslUpgrade php5Upgrade php7-intlUpgrade apache2-mod_php7Upgrade php7-opensslUpgrade php7-fpmUpgrade php5-sysvmsgUpgrade php5-gmpUpgrade libtidy-0_99-0-develUpgrade libmemcachedUpgrade php5-xslUpgrade php7-gmpUpgrade php72-xmlreaderUpgrade php72-imapUpgrade php72-snmpUpgrade php7-soapUpgrade php7-embedUpgrade php53-suhosinUpgrade php53-imapUpgrade php7-gettextUpgrade php72-mysqlUpgrade php7-firebirdUpgrade php53-socketsUpgrade php72-domUpgrade php72-sysvmsgUpgrade php5-pcntlUpgrade php53-snmpUpgrade php72-readlineUpgrade php5-mcryptUpgrade php7-pgsqlUpgrade php5-opensslUpgrade php5-fastcgiUpgrade php53-sysvshmUpgrade php5-socketsUpgrade php72Upgrade php7-jsonUpgrade php5-xmlreaderUpgrade php7-mbstringUpgrade php5-imapUpgrade php72-zipUpgrade php7-ftpUpgrade php53-ctypeUpgrade php5-mysqlUpgrade php53-fileinfoUpgrade php53-readlineUpgrade php7-domUpgrade php53-sysvmsgUpgrade php72-posixUpgrade php72-pdoUpgrade php7-posixUpgrade php7-sodiumUpgrade php53-odbcUpgrade php5-ftpUpgrade php72-exifUpgrade libmemcached-develUpgrade php7Upgrade apache2-mod_php5Upgrade php7-gdUpgrade php53-soapUpgrade php53-shmopUpgrade php5-develUpgrade php7-bz2Upgrade php72-odbcUpgrade php7-exifUpgrade php72-tokenizerUpgrade php53-wddxUpgrade php53-sqliteUpgrade php7-pcntlUpgrade php72-shmopUpgrade php72-xmlwriterUpgrade php7-xmlreaderUpgrade php7-imapUpgrade php72-fileinfoUpgrade php5-jsonUpgrade php53-tidyUpgrade php5-xmlwriter | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php5-xmlrpcUpgrade php7.0-fpmUpgrade php7.0-xmlrpcUpgrade php7.0-cliUpgrade php7.0-mbstringUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php5-cgiUpgrade php5-cliUpgrade php5-fpm | Mar 15, 2019 | Feb 22, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub