The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-odbcUpgrade php-gmpUpgrade php-pgsqlUpgrade php-ldapUpgrade php-pdoUpgrade php-dbgUpgrade php-mbstringUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-soapUpgrade php-develUpgrade php-jsonUpgrade php-commonUpgrade php-recodeUpgrade php-bcmathUpgrade php-gdUpgrade php-xmlrpcUpgrade apcu-panelUpgrade php-embeddedUpgrade php-processUpgrade phpUpgrade php-mysqlndUpgrade libzip-toolsUpgrade libzipUpgrade php-xmlUpgrade php-snmpUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-opcacheUpgrade php-cliUpgrade php-pearUpgrade php-fpmUpgrade php-enchant | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-cliUpgrade php-embeddedUpgrade php-soapUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-soap-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-recodeUpgrade php-pdoUpgrade phpUpgrade libzip-develUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade apcu-panelUpgrade libzipUpgrade php-dbaUpgrade php-processUpgrade php-mysqlndUpgrade php-debugsourceUpgrade php-opcacheUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-enchantUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-xmlUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-recode-debuginfoUpgrade php-gmpUpgrade php-json-debuginfoUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-cli-debuginfoUpgrade php-develUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-ldap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-pgsqlUpgrade php-dbgUpgrade php-jsonUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-fpmUpgrade libzip-debuginfoUpgrade php-intl-debuginfoUpgrade php-common-debuginfoUpgrade php-process-debuginfoUpgrade php-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-mbstringUpgrade php-pearUpgrade php-commonUpgrade php-xml-debuginfo | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-ldapUpgrade php-pgsqlUpgrade php-soapUpgrade php-commonUpgrade phpUpgrade php-odbcUpgrade php-xmlUpgrade php-pdoUpgrade php-processUpgrade php-mysqlUpgrade php-gdUpgrade php-xmlrpcUpgrade php-cliUpgrade php-recode | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-processUpgrade php-xmlUpgrade php-cliUpgrade phpUpgrade php-commonUpgrade php-recodeUpgrade php-gdUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-pdoUpgrade php-soapUpgrade php-odbcUpgrade php-mysql | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade phpUpgrade php-processUpgrade php-gdUpgrade php-soapUpgrade php-pdoUpgrade php-cliUpgrade php-recodeUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-commonUpgrade php-mysqlUpgrade php-odbcUpgrade php-xmlUpgrade php-pgsql | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-odbcUpgrade php-pdoUpgrade php-intlUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-dbaUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-ldapUpgrade php-soapUpgrade php-commonUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-jsonUpgrade libzip-toolsUpgrade libzip-develUpgrade php-xmlUpgrade phpUpgrade php-enchantUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-processUpgrade php-opcacheUpgrade php-pearUpgrade php-snmpUpgrade php-fpmUpgrade php-gdUpgrade libzipUpgrade php-develUpgrade php-mysqlndUpgrade php-cliUpgrade php-embeddedUpgrade php-recode | Jul 22, 2024 | Dec 6, 2018 |
| Php | — | Upgrade to PHP version 5.6.40Upgrade to PHP version 7.3.1Upgrade to PHP version 7.2.14 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade libzip-develUpgrade php-ldap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-recode-debuginfoUpgrade php-intl-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-processUpgrade php-odbcUpgrade php-xmlUpgrade php-opcacheUpgrade php-dba-debuginfoUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-mbstring-debuginfoUpgrade php-mbstringUpgrade php-recodeUpgrade phpUpgrade apcu-panelUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-dbaUpgrade php-commonUpgrade php-snmpUpgrade php-mysqlndUpgrade php-dbg-debuginfoUpgrade php-common-debuginfoUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-soap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade php-dbgUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-embeddedUpgrade php-xml-debuginfoUpgrade php-enchantUpgrade php-xmlrpc-debuginfoUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-develUpgrade php-jsonUpgrade libzip-tools-debuginfoUpgrade php-gmpUpgrade php-pearUpgrade php-gdUpgrade php-pecl-zipUpgrade php-pecl-zip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldapUpgrade libzipUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuNo solution existsUpgrade php-pdo | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade libzip-toolsUpgrade php-xmlUpgrade php-fpmUpgrade php-recodeUpgrade php-enchant-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-debuginfoUpgrade php-cliUpgrade php-embeddedUpgrade phpUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-recode-debuginfoUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-snmpUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-ldap-debuginfoUpgrade php-xml-debuginfoUpgrade php-jsonUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pgsqlUpgrade php-soapUpgrade php-process-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-cli-debuginfoUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-commonUpgrade php-intlUpgrade php-ldapUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade php-gmpUpgrade php-pdo-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-odbc-debuginfoUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-odbc | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php5-ctypeUpgrade php5-shmopUpgrade tidyUpgrade php7-ctypeUpgrade php7-wddxUpgrade php72-opensslUpgrade php72-soapUpgrade php7-shmopUpgrade php7-ldapUpgrade php72-socketsUpgrade php7-testresultsUpgrade php53-pcntlUpgrade php72-intlUpgrade php7-enchantUpgrade php7-opcacheUpgrade php7-bcmathUpgrade php7-tokenizerUpgrade php53-intlUpgrade php7-fileinfoUpgrade php7-mcryptUpgrade php7-calendarUpgrade php72-ldapUpgrade php53-domUpgrade php7-zipUpgrade php7-readlineUpgrade php7-develUpgrade php72-pspellUpgrade php53-fastcgiUpgrade php53-opensslUpgrade php7-fastcgiUpgrade php5-gdUpgrade php53Upgrade php5-sqliteUpgrade php53-dbaUpgrade php53-pearUpgrade php5-mbstringUpgrade php5-intlUpgrade libtidy-0_99-0Upgrade php72-pharUpgrade php53-xmlwriterUpgrade php72-jsonUpgrade php5-domUpgrade php7-pear-archive_tarUpgrade php5-suhosinUpgrade php72-gdUpgrade php72-wddxUpgrade php7-sysvsemUpgrade php72-memcachedUpgrade php7-xmlwriterUpgrade php53-bz2Upgrade php53-xslUpgrade php7-mysqlUpgrade php5-enchantUpgrade php7-pearUpgrade libmemcachedutil2Upgrade php53-gmpUpgrade php53-tokenizerUpgrade php72-gmpUpgrade apache2-mod_php72Upgrade apache2-mod_php53Upgrade php72-enchantUpgrade php7-socketsUpgrade php5-ldapUpgrade php72-opcacheUpgrade php5-exifUpgrade php72-ctypeUpgrade php7-sysvshmUpgrade php5-tokenizerUpgrade php5-iconvUpgrade php7-snmpUpgrade php53-pspellUpgrade php5-pgsqlUpgrade php53-xmlrpcUpgrade php7-zlibUpgrade php5-fileinfoUpgrade php72-iconvUpgrade php53-exifUpgrade php5-opcacheUpgrade php72-pear-archive_tarUpgrade php72-develUpgrade php7-sqliteUpgrade php72-dbaUpgrade php7-dbaUpgrade php5-pspellUpgrade php5-fpmUpgrade php5-odbcUpgrade php72-ftpUpgrade php72-mbstringUpgrade php7-pspellUpgrade php72-tidyUpgrade php53-jsonUpgrade php5-dbaUpgrade php5-zlibUpgrade php53-mysqlUpgrade php72-pcntlUpgrade php72-fastcgiUpgrade php5-curlUpgrade php7-pharUpgrade libmemcached11Upgrade php5-posixUpgrade php53-develUpgrade php72-calendarUpgrade php7-odbcUpgrade php5-sysvshmUpgrade php72-gettextUpgrade php5-fastcgiUpgrade php53-pgsqlUpgrade php7-pcntlUpgrade php72-odbcUpgrade php72-fileinfoUpgrade php53-mcryptUpgrade php53-imapUpgrade php53-sysvsemUpgrade php53-sysvshmUpgrade php7-mbstringUpgrade php5Upgrade php72-mysqlUpgrade php5-pharUpgrade php53-calendarUpgrade apache2-mod_php5Upgrade php7-imapUpgrade php5-sysvsemUpgrade libtidy-0_99-0-develUpgrade php7-bz2Upgrade php53-readlineUpgrade php72-xmlwriterUpgrade php7-posixUpgrade php53-ctypeUpgrade php72-sqliteUpgrade php7-gettextUpgrade php72-exifUpgrade php72-shmopUpgrade php53-zlibUpgrade php5-opensslUpgrade php53-tidyUpgrade php53-wddxUpgrade php72-domUpgrade php72Upgrade php72-tokenizerUpgrade php7-xmlreaderUpgrade php5-soapUpgrade php5-mysqlUpgrade php5-mcryptUpgrade php72-bcmathUpgrade php53-shmopUpgrade php5-develUpgrade php53-sqliteUpgrade php5-gmpUpgrade php72-xmlreaderUpgrade php72-sysvmsgUpgrade php72-xslUpgrade php5-xmlwriterUpgrade php72-pearUpgrade php7Upgrade php53-socketsUpgrade php7-firebirdUpgrade php7-embedUpgrade php72-sysvsemUpgrade php5-socketsUpgrade php72-readlineUpgrade php5-imapUpgrade php5-pdoUpgrade libmemcached-develUpgrade php5-gettextUpgrade php53-gettextUpgrade php72-bz2Upgrade php5-wddxUpgrade php53-zipUpgrade php7-sysvmsgUpgrade php7-curlUpgrade php53-xmlreaderUpgrade php7-pgsqlUpgrade php7-sodiumUpgrade php53-ldapUpgrade php53-mbstringUpgrade php53-gdUpgrade php53-ftpUpgrade php53-curlUpgrade php7-gdUpgrade php5-calendarUpgrade php5-pcntlUpgrade php53-fileinfoUpgrade php72-xmlrpcUpgrade php53-bcmathUpgrade php5-pearUpgrade php7-iconvUpgrade php53-iconvUpgrade php5-snmpUpgrade php53-posixUpgrade php72-pgsqlUpgrade php7-xmlrpcUpgrade php72-fpmUpgrade php7-jsonUpgrade php7-ftpUpgrade php72-curlUpgrade php7-pdoUpgrade php53-pdoUpgrade php5-xslUpgrade php53-suhosinUpgrade php72-snmpUpgrade php72-imapUpgrade php7-exifUpgrade php7-soapUpgrade libmemcachedUpgrade php53-odbcUpgrade php53-sysvmsgUpgrade php7-intlUpgrade php7-opensslUpgrade php7-fpmUpgrade apache2-mod_php7Upgrade php72-posixUpgrade php5-xmlreaderUpgrade php5-sysvmsgUpgrade php7-domUpgrade php72-pdoUpgrade php72-sysvshmUpgrade php5-bcmathUpgrade php5-ftpUpgrade php72-zlibUpgrade php5-xmlrpcUpgrade php7-tidyUpgrade php7-gmpUpgrade php53-soapUpgrade php5-zipUpgrade php7-xslUpgrade php72-zipUpgrade php5-jsonUpgrade php5-bz2Upgrade php53-snmp | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php7.0-fpmUpgrade php7.0-xmlrpcUpgrade libapache2-mod-php5Upgrade php7.0-mbstringUpgrade php7.0-cliUpgrade php5-xmlrpcUpgrade libapache2-mod-php7.0Upgrade php5-cliUpgrade php5-cgiUpgrade php5-fpmUpgrade php7.0-cgi | Mar 15, 2019 | Feb 22, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub