An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-gdUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-intlUpgrade php-dbaUpgrade php-mbstringUpgrade php-soapUpgrade apcu-panelUpgrade libzip-develUpgrade php-snmpUpgrade php-commonUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-cliUpgrade php-processUpgrade php-odbcUpgrade phpUpgrade libzipUpgrade php-ldapUpgrade php-xmlUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-bcmathUpgrade php-recodeUpgrade php-pgsqlUpgrade php-enchantUpgrade php-develUpgrade php-pdoUpgrade php-dbgUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pearUpgrade php-pecl-apcuUpgrade php-json | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-recodeUpgrade php-soapUpgrade php-pearUpgrade php-mbstringUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-debuginfoUpgrade php-fpmUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-develUpgrade php-soap-debuginfoUpgrade php-gdUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade apcu-panelUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbgUpgrade php-mysqlndUpgrade php-embeddedUpgrade libzipUpgrade phpUpgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-develUpgrade libzip-debuginfoUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-pgsqlUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-bcmathUpgrade php-enchantUpgrade php-mbstring-debuginfoUpgrade php-pdo-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-snmpUpgrade php-pdo | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade php-intlUpgrade php-snmpUpgrade php-pgsqlUpgrade php-dbgUpgrade phpUpgrade php-bcmathUpgrade php-develUpgrade php-odbcUpgrade php-ldapUpgrade php-cliUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-commonUpgrade libzip-develUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-soapUpgrade php-embeddedUpgrade libzipUpgrade libzip-toolsUpgrade php-processUpgrade php-dbaUpgrade php-enchantUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-pdoUpgrade php-recodeUpgrade php-jsonUpgrade php-pearUpgrade php-pecl-zipUpgrade php-gd | Jul 22, 2024 | Dec 29, 2018 |
| Php | — | Upgrade to PHP version 7.3.2Upgrade to PHP version 7.2.14 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-xml-debuginfoUpgrade php-develUpgrade php-gmpUpgrade php-process-debuginfoUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-json-debuginfoUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php-commonUpgrade php-jsonUpgrade php-pecl-zipUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-dbaUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-bcmathUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-odbc-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-pdoUpgrade php-intlUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-mbstring-debuginfoUpgrade phpUpgrade php-xmlrpcUpgrade php-processUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade apcu-panelUpgrade php-xmlUpgrade php-cliUpgrade php-debugsourceUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-enchantUpgrade php-fpmUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-apcuUpgrade libzip-toolsUpgrade php-gmp-debuginfoUpgrade php-snmpUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-pearUpgrade php-pecl-apcu-debuginfoUpgrade php-ldapUpgrade php-embeddedUpgrade php-debuginfoUpgrade php-enchant-debuginfoUpgrade php-recode | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-odbcUpgrade php-pecl-zip-debugsourceUpgrade php-json-debuginfoUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-odbc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-soap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-process-debuginfoUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade php-intlUpgrade php-dbgUpgrade php-gmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-processUpgrade php-opcache-debuginfoUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade php-fpmUpgrade php-opcacheUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-gmpUpgrade libzip-debugsourceUpgrade phpUpgrade php-enchantUpgrade php-dbaUpgrade php-xmlUpgrade php-debugsourceUpgrade php-soapUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-bcmathUpgrade php-cliUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-recodeUpgrade php-develUpgrade php-json | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php7-embedUpgrade php72-readlineUpgrade php72-exifUpgrade php72-odbcUpgrade php72-gmpUpgrade php72-xmlwriterUpgrade php7-pdoUpgrade php72-ftpUpgrade php72-develUpgrade php7-odbcUpgrade php7-zipUpgrade php7-snmpUpgrade php7-mysqlUpgrade php7-xmlrpcUpgrade php72-enchantUpgrade php72-iconvUpgrade php7-pgsqlUpgrade php72-snmpUpgrade php7-shmopUpgrade php72-gettextUpgrade php7-develUpgrade php72Upgrade php72-memcachedUpgrade php7-socketsUpgrade php7-sqliteUpgrade php72-sysvsemUpgrade php72-ctypeUpgrade php7-gdUpgrade php72-pear-archive_tarUpgrade php7-pharUpgrade libmemcachedutil2Upgrade php7-gmpUpgrade php7-pear-archive_tarUpgrade php72-xmlrpcUpgrade php7-zlibUpgrade php72-xmlreaderUpgrade php7-iconvUpgrade php72-pgsqlUpgrade php72-tidyUpgrade php7-gettextUpgrade php7-xmlreaderUpgrade php7-tidyUpgrade php7-domUpgrade libtidy-0_99-0Upgrade php7-sysvmsgUpgrade php7-ldapUpgrade php72-pspellUpgrade php7-bz2Upgrade php7-ftpUpgrade php72-fileinfoUpgrade php7-wddxUpgrade php7-bcmathUpgrade php72-opcacheUpgrade tidyUpgrade php7-xslUpgrade php7-posixUpgrade php72-fastcgiUpgrade php72-socketsUpgrade php7Upgrade php7-testresultsUpgrade php72-bcmathUpgrade php7-exifUpgrade php7-pearUpgrade php7-soapUpgrade php72-posixUpgrade php72-zlibUpgrade php7-opcacheUpgrade php72-imapUpgrade php7-tokenizerUpgrade apache2-mod_php72Upgrade php7-sodiumUpgrade php72-gdUpgrade php72-pearUpgrade php72-calendarUpgrade libmemcached11Upgrade php7-xmlwriterUpgrade libtidy-0_99-0-develUpgrade php72-soapUpgrade php72-pdoUpgrade php7-dbaUpgrade php7-enchantUpgrade php7-sysvsemUpgrade php72-sysvshmUpgrade php72-sqliteUpgrade php72-mbstringUpgrade php72-dbaUpgrade php7-mbstringUpgrade php72-ldapUpgrade php7-fpmUpgrade php72-fpmUpgrade php72-pharUpgrade php72-xslUpgrade php7-calendarUpgrade php7-ctypeUpgrade php72-mysqlUpgrade php72-bz2Upgrade php7-firebirdUpgrade php72-zipUpgrade php72-opensslUpgrade php7-sysvshmUpgrade php7-pcntlUpgrade libmemcached-develUpgrade php7-fileinfoUpgrade php7-jsonUpgrade php72-tokenizerUpgrade php72-domUpgrade php72-shmopUpgrade php7-opensslUpgrade php7-intlUpgrade php7-fastcgiUpgrade php72-sysvmsgUpgrade php7-curlUpgrade php72-jsonUpgrade php72-pcntlUpgrade apache2-mod_php7Upgrade php72-intlUpgrade php7-readlineUpgrade php72-curlUpgrade php72-wddxUpgrade libmemcached | Jun 18, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php5-fpmUpgrade php7.0-cliUpgrade php5-xmlrpcUpgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php7.0-fpmUpgrade php5-cgiUpgrade php5-cliUpgrade php7.0-mbstringUpgrade libapache2-mod-php5Upgrade php7.0-xmlrpc | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub