An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-cliUpgrade php-opcacheUpgrade php-soapUpgrade php-processUpgrade php-xmlrpcUpgrade php-intlUpgrade php-gdUpgrade libzip-toolsUpgrade php-snmpUpgrade php-mysqlndUpgrade libzip-develUpgrade apcu-panelUpgrade php-mbstringUpgrade php-commonUpgrade php-dbaUpgrade php-pearUpgrade php-bcmathUpgrade php-pgsqlUpgrade libzipUpgrade php-odbcUpgrade php-fpmUpgrade php-dbgUpgrade phpUpgrade php-gmpUpgrade php-recodeUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-ldapUpgrade php-xmlUpgrade php-enchantUpgrade php-devel | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade apcu-panelUpgrade php-bcmathUpgrade php-odbcUpgrade php-pgsql-debuginfoUpgrade php-pgsqlUpgrade phpUpgrade php-pdoUpgrade php-mbstring-debuginfoUpgrade php-gmpUpgrade php-intlUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-xml-debuginfoUpgrade php-common-debuginfoUpgrade libzipUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade php-snmpUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debugsourceUpgrade php-process-debuginfoUpgrade php-dba-debuginfoUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mysqlndUpgrade php-enchantUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-pecl-zip-debuginfoUpgrade libzip-debuginfoUpgrade php-jsonUpgrade libzip-toolsUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpcUpgrade php-develUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-xmlUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-fpmUpgrade php-ldap-debuginfoUpgrade php-pearUpgrade php-cliUpgrade php-processUpgrade php-recode-debuginfoUpgrade php-soapUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-odbc-debuginfoUpgrade php-dbaUpgrade php-opcache-debuginfoUpgrade php-gdUpgrade php-dbg-debuginfoUpgrade php-debuginfo | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade libzipUpgrade php-enchantUpgrade php-opcacheUpgrade php-processUpgrade php-dbaUpgrade libzip-toolsUpgrade php-gmpUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-pearUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-gdUpgrade php-mbstringUpgrade php-recodeUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-soapUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-snmpUpgrade apcu-panelUpgrade libzip-develUpgrade php-ldapUpgrade php-bcmathUpgrade php-dbgUpgrade php-pgsqlUpgrade php-fpmUpgrade phpUpgrade php-intlUpgrade php-xmlUpgrade php-cliUpgrade php-odbcUpgrade php-devel | Jul 22, 2024 | Dec 29, 2018 |
| Php | — | Upgrade to PHP version 7.2.14Upgrade to PHP version 7.3.2 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-dbaUpgrade php-develUpgrade php-mbstring-debuginfoUpgrade php-intl-debuginfoUpgrade php-intlUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-mbstringUpgrade php-xmlrpc-debuginfoUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-jsonUpgrade php-gdUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-bcmathUpgrade php-opcache-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pgsqlUpgrade php-fpm-debuginfoUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-enchantUpgrade php-fpmUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade php-ldapUpgrade php-pearUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade phpUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-recodeUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-debugsourceUpgrade php-soap-debuginfoUpgrade php-pecl-apcuUpgrade php-common-debuginfoUpgrade apcu-panel | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-enchantUpgrade php-mbstringUpgrade php-embeddedUpgrade php-snmpUpgrade php-xmlUpgrade php-xmlrpc-debuginfoUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-gd-debuginfoUpgrade php-soapUpgrade php-jsonUpgrade php-gdUpgrade php-cliUpgrade php-debugsourceUpgrade php-gmpUpgrade php-xmlrpcUpgrade libzip-develUpgrade php-develUpgrade libzipUpgrade libzip-debugsourceUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-processUpgrade php-bcmathUpgrade php-dbaUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-opcacheUpgrade php-snmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-recodeUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debuginfoUpgrade php-fpmUpgrade php-pdoUpgrade php-intl-debuginfoUpgrade php-pecl-zipUpgrade php-recode-debuginfoUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade php-pecl-zip-debugsourceUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-ldapUpgrade php-soap-debuginfoUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-commonUpgrade php-cli-debuginfoUpgrade php-xml-debuginfoUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-enchant-debuginfo | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php7-ldapUpgrade php7-wddxUpgrade php7-snmpUpgrade php72-socketsUpgrade php72-xmlwriterUpgrade php72-pgsqlUpgrade tidyUpgrade php72-snmpUpgrade php72-opcacheUpgrade php7-sysvmsgUpgrade php72-fileinfoUpgrade php7-ftpUpgrade php7-pgsqlUpgrade php7-zipUpgrade php72-ctypeUpgrade php72-xmlreaderUpgrade php7-pharUpgrade php72-sysvsemUpgrade libmemcachedutil2Upgrade php7-xmlreaderUpgrade php72-memcachedUpgrade php7-develUpgrade php7-gdUpgrade php72-pspellUpgrade php72-tidyUpgrade php7-shmopUpgrade php7-bcmathUpgrade php7-opcacheUpgrade php72-posixUpgrade php7-embedUpgrade php7-pearUpgrade php7-tidyUpgrade php72-zlibUpgrade php7-soapUpgrade php72-imapUpgrade libtidy-0_99-0Upgrade php72-fastcgiUpgrade php7Upgrade php7-testresultsUpgrade php7-bz2Upgrade php7-posixUpgrade php72-bcmathUpgrade php7-socketsUpgrade php72-pear-archive_tarUpgrade php7-iconvUpgrade php7-pear-archive_tarUpgrade php72-enchantUpgrade php7-domUpgrade php7-gettextUpgrade php7-gmpUpgrade php7-zlibUpgrade php7-xmlrpcUpgrade php7-tokenizerUpgrade php72-exifUpgrade php7-pdoUpgrade php72-develUpgrade php7-mysqlUpgrade php7-xslUpgrade php7-sqliteUpgrade php7-exifUpgrade php72-gettextUpgrade php7-odbcUpgrade php72Upgrade php72-readlineUpgrade php72-odbcUpgrade php72-gmpUpgrade php72-ftpUpgrade php72-iconvUpgrade php72-xmlrpcUpgrade php7-fileinfoUpgrade php72-tokenizerUpgrade php7-firebirdUpgrade php7-pcntlUpgrade libmemcachedUpgrade php72-opensslUpgrade libmemcached-develUpgrade php72-zipUpgrade php7-sysvshmUpgrade php7-jsonUpgrade apache2-mod_php72Upgrade php72-pearUpgrade php72-ldapUpgrade php72-curlUpgrade php7-sodiumUpgrade libmemcached11Upgrade php72-domUpgrade php72-shmopUpgrade php7-opensslUpgrade php7-fastcgiUpgrade php72-sysvmsgUpgrade php72-gdUpgrade php7-readlineUpgrade php72-fpmUpgrade php7-calendarUpgrade php72-mbstringUpgrade php72-intlUpgrade php72-sqliteUpgrade php72-mysqlUpgrade php72-bz2Upgrade php72-dbaUpgrade php72-sysvshmUpgrade php7-sysvsemUpgrade php72-pharUpgrade php72-xslUpgrade php72-wddxUpgrade php72-jsonUpgrade php7-enchantUpgrade php7-ctypeUpgrade apache2-mod_php7Upgrade php72-pdoUpgrade php7-fpmUpgrade php72-soapUpgrade php7-intlUpgrade php7-xmlwriterUpgrade php7-mbstringUpgrade libtidy-0_99-0-develUpgrade php72-calendarUpgrade php72-pcntlUpgrade php7-dbaUpgrade php7-curl | Jun 18, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php7.0Upgrade php5-xmlrpcUpgrade php5-fpmUpgrade php7.0-cliUpgrade php7.0-fpmUpgrade libapache2-mod-php5Upgrade php5-cliUpgrade php7.0-mbstringUpgrade php7.0-xmlrpcUpgrade php7.0-cgiUpgrade php5-cgi | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub