An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pearUpgrade php-jsonUpgrade php-xmlUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-bcmathUpgrade php-pdoUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-enchantUpgrade libzipUpgrade php-develUpgrade php-odbcUpgrade php-dbgUpgrade php-pgsqlUpgrade php-commonUpgrade php-intlUpgrade libzip-develUpgrade php-processUpgrade php-cliUpgrade php-recodeUpgrade php-gdUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-opcacheUpgrade phpUpgrade php-mysqlndUpgrade php-dbaUpgrade apcu-panelUpgrade php-snmpUpgrade php-soap | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-process-debuginfoUpgrade php-intlUpgrade libzip-develUpgrade php-fpm-debuginfoUpgrade php-commonUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-debugsourceUpgrade apcu-panelUpgrade php-enchantUpgrade php-mbstring-debuginfoUpgrade php-pecl-zipUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-xmlrpc-debuginfoUpgrade php-jsonUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcuUpgrade php-ldapUpgrade phpUpgrade libzip-debuginfoUpgrade php-develUpgrade php-gmpUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gd-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade php-pdoUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-odbc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-debuginfoUpgrade php-fpmUpgrade php-pecl-zip-debugsourceUpgrade php-pspellUpgrade php-snmpUpgrade php-cliUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-recode-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-mysqlUpgrade php-pearUpgrade php-gdUpgrade php-xmlrpcUpgrade php-recode | Apr 1, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-cliUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-mysqlUpgrade php-pdoUpgrade php-ldapUpgrade php-commonUpgrade php-gdUpgrade phpUpgrade php-soapUpgrade php-odbcUpgrade php-processUpgrade php-pgsql | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlUpgrade php-cliUpgrade phpUpgrade php-ldapUpgrade php-recodeUpgrade php-pdoUpgrade php-soapUpgrade php-processUpgrade php-gdUpgrade php-odbcUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-common | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-ldapUpgrade php-recodeUpgrade php-pdoUpgrade php-soapUpgrade phpUpgrade php-gdUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-commonUpgrade php-mysqlUpgrade php-cliUpgrade php-processUpgrade php-odbcUpgrade php-pgsql | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade libzip-toolsUpgrade php-recodeUpgrade php-mysqlndUpgrade php-soapUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-pspellUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-enchantUpgrade php-dbaUpgrade php-gdUpgrade php-mysqlUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-processUpgrade php-pgsqlUpgrade php-pdoUpgrade php-fpmUpgrade php-pearUpgrade php-dbgUpgrade libzipUpgrade php-jsonUpgrade php-bcmathUpgrade phpUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-xmlUpgrade php-develUpgrade php-cliUpgrade libzip-develUpgrade apcu-panelUpgrade php-odbcUpgrade php-snmpUpgrade php-gmpUpgrade php-commonUpgrade php-ldap | Oct 5, 2022 | Feb 22, 2019 |
| Php | — | Upgrade to PHP version 7.2.14Upgrade to PHP version 5.6.40Upgrade to PHP version 7.3.1 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-odbcUpgrade php-develUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pdo-debuginfoUpgrade php-bcmathUpgrade php-mysqlUpgrade libzipUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-gd-debuginfoNo solution existsUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pgsqlUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php-gmpUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-gdUpgrade php-fpmUpgrade php-pspellUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-process-debuginfoUpgrade php-ldapUpgrade php-cli-debuginfoUpgrade phpUpgrade php-json-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xmlUpgrade php-processUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-cliUpgrade php-recodeUpgrade php-mysqlndUpgrade php-pecl-apcu-debugsourceUpgrade php-debugsourceUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-snmpUpgrade php-intlUpgrade php-opcacheUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade php-recode-debuginfoUpgrade apcu-panelUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-common-debuginfoUpgrade php-enchantUpgrade php-opcache-debuginfo | Apr 1, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-snmp-debuginfoUpgrade libzip-debuginfoUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-dbgUpgrade phpUpgrade libzip-toolsUpgrade php-json-debuginfoUpgrade php-cliUpgrade php-soap-debuginfoUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade libzip-develUpgrade php-enchantUpgrade php-mbstring-debuginfoUpgrade php-recodeUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-processUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-odbcUpgrade php-debugsourceUpgrade libzip-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-recode-debuginfoUpgrade php-opcache-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-tools-debuginfoUpgrade libzipUpgrade php-gdUpgrade php-develUpgrade php-jsonUpgrade php-bcmathUpgrade php-xmlUpgrade php-mbstringUpgrade php-odbc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpcUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-soapUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-dba-debuginfoUpgrade php-pgsql | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php7-pear-archive_tarUpgrade php53-sysvmsgUpgrade apache2-mod_php72Upgrade php5-wddxUpgrade php7-tokenizerUpgrade php5-imapUpgrade php5-fastcgiUpgrade php5-zipUpgrade php72-xmlreaderUpgrade php72-curlUpgrade php53-intlUpgrade php7-bcmathUpgrade php7-mysqlUpgrade php72-gettextUpgrade php53-soapUpgrade php7-mbstringUpgrade php72-tidyUpgrade php5-sysvmsgUpgrade php53-mysqlUpgrade php72-gmpUpgrade php7-fileinfoUpgrade php72-sqliteUpgrade php53-suhosinUpgrade php5-posixUpgrade php53-opensslUpgrade php53-ftpUpgrade php7-iconvUpgrade php5-iconvUpgrade php72-iconvUpgrade php7-pharUpgrade php7-fpmUpgrade php7-wddxUpgrade php5-sysvshmUpgrade libmemcachedutil2Upgrade php5-fileinfoUpgrade php53-domUpgrade php7-sysvmsgUpgrade php72-calendarUpgrade php5-intlUpgrade php72-fastcgiUpgrade php72-xmlwriterUpgrade php5-gettextUpgrade php5-opensslUpgrade php7-zlibUpgrade apache2-mod_php7Upgrade apache2-mod_php5Upgrade php7-ftpUpgrade php72-zipUpgrade php7-fastcgiUpgrade php72-jsonUpgrade php7-snmpUpgrade php53-curlUpgrade php7-shmopUpgrade php7-jsonUpgrade php7-sysvsemUpgrade php72-soapUpgrade php53-jsonUpgrade php7-ctypeUpgrade php5-pspellUpgrade php7-readlineUpgrade php5-xmlrpcUpgrade php5-gdUpgrade php7-pdoUpgrade php5-suhosinUpgrade php72-ftpUpgrade php7-enchantUpgrade libmemcachedUpgrade php53-calendarUpgrade php5-pearUpgrade php72-pharUpgrade php53-xmlwriterUpgrade php72-pspellUpgrade php72-socketsUpgrade php5-xmlwriterUpgrade php72-memcachedUpgrade libmemcached11Upgrade php53-sysvsemUpgrade php53-wddxUpgrade php72-mysqlUpgrade php72-ldapUpgrade php5-exifUpgrade php7-posixUpgrade php72-odbcUpgrade php53-tokenizerUpgrade php7-develUpgrade php5-xslUpgrade php72-pear-archive_tarUpgrade php53-mbstringUpgrade php7-ldapUpgrade php7-pgsqlUpgrade php7-xmlwriterUpgrade php53-pcntlUpgrade php53-develUpgrade php53-sqliteUpgrade php72-readlineUpgrade php53-gettextUpgrade php72-snmpUpgrade php7-sqliteUpgrade php53-fileinfoUpgrade php5-mbstringUpgrade php7-dbaUpgrade php72-xmlrpcUpgrade php53-exifUpgrade php7-testresultsUpgrade apache2-mod_php53Upgrade php53-tidyUpgrade php7-opensslUpgrade php5-fpmUpgrade php53Upgrade php72-opensslUpgrade php5-zlibUpgrade php7-odbcUpgrade php5-ctypeUpgrade php5-domUpgrade php5-socketsUpgrade php7-pspellUpgrade php7-sysvshmUpgrade php5-mcryptUpgrade php7-xmlreaderUpgrade php72-shmopUpgrade php5-enchantUpgrade php72-ctypeUpgrade php5-sysvsemUpgrade php53-dbaUpgrade php72-wddxUpgrade php53-pspellUpgrade php5-mysqlUpgrade php53-xmlreaderUpgrade php7-gettextUpgrade php7-sodiumUpgrade php72-fpmUpgrade php72-xslUpgrade php7-pearUpgrade php5-opcacheUpgrade php53-pearUpgrade php72-pcntlUpgrade php7-opcacheUpgrade php7-intlUpgrade php72-exifUpgrade php72-bz2Upgrade tidyUpgrade php53-xmlrpcUpgrade php53-sysvshmUpgrade php7-gdUpgrade php72-develUpgrade libtidy-0_99-0Upgrade php7Upgrade php7-bz2Upgrade php72-fileinfoUpgrade php53-socketsUpgrade php7-calendarUpgrade php5-calendarUpgrade php7-curlUpgrade php7-mcryptUpgrade php5-snmpUpgrade php53-pdoUpgrade php72-zlibUpgrade php72-pearUpgrade php72-tokenizerUpgrade php53-xslUpgrade php53-ctypeUpgrade php7-gmpUpgrade php53-snmpUpgrade php7-embedUpgrade php53-iconvUpgrade php72-mbstringUpgrade php53-mcryptUpgrade php72Upgrade libmemcached-develUpgrade php5-ldapUpgrade php7-zipUpgrade php53-bz2Upgrade php5-bcmathUpgrade php5-dbaUpgrade php53-posixUpgrade php72-bcmathUpgrade php5-odbcUpgrade php5-gmpUpgrade php53-ldapUpgrade php7-tidyUpgrade php7-pcntlUpgrade php72-gdUpgrade php53-fastcgiUpgrade php5-bz2Upgrade php53-bcmathUpgrade php5-pgsqlUpgrade php5-jsonUpgrade php5-sqliteUpgrade php72-intlUpgrade php72-imapUpgrade php7-firebirdUpgrade php5-soapUpgrade php53-imapUpgrade php5-curlUpgrade php53-readlineUpgrade php5-develUpgrade php72-dbaUpgrade php72-posixUpgrade php53-zlibUpgrade php7-xmlrpcUpgrade php72-sysvmsgUpgrade php7-xslUpgrade php72-pgsqlUpgrade php72-sysvshmUpgrade php53-shmopUpgrade php72-pdoUpgrade php53-gdUpgrade php5-shmopUpgrade php53-gmpUpgrade php5-xmlreaderUpgrade php5Upgrade php72-sysvsemUpgrade php53-pgsqlUpgrade php5-pdoUpgrade php72-opcacheUpgrade php53-zipUpgrade php7-imapUpgrade libtidy-0_99-0-develUpgrade php5-pharUpgrade php7-socketsUpgrade php5-ftpUpgrade php72-domUpgrade php7-exifUpgrade php5-tokenizerUpgrade php7-domUpgrade php7-soapUpgrade php53-odbcUpgrade php72-enchantUpgrade php5-pcntl | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php7.0-xmlrpcUpgrade php5-xmlrpcUpgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php7.0-cliUpgrade php7.0-cgiUpgrade php5-fpmUpgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cliUpgrade php7.0-mbstring | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub