The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-embeddedUpgrade php-dbgUpgrade php-pdoUpgrade php-pearUpgrade php-fpmUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-apcuUpgrade libzipUpgrade php-xmlUpgrade php-develUpgrade php-ldapUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-odbcUpgrade php-recodeUpgrade phpUpgrade libzip-toolsUpgrade php-soapUpgrade php-mysqlndUpgrade php-cliUpgrade php-intlUpgrade php-dbaUpgrade php-processUpgrade libzip-develUpgrade php-commonUpgrade php-opcacheUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-gdUpgrade php-snmpUpgrade php-mbstring | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-gmpUpgrade php-opcacheUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade php-intlUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-pdoUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade php-commonUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-pgsql-debuginfoUpgrade apcu-panelUpgrade php-develUpgrade php-enchant-debuginfoUpgrade phpUpgrade php-enchantUpgrade php-jsonUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-xml-debuginfoUpgrade libzipUpgrade php-process-debuginfoUpgrade php-mysqlndUpgrade php-pdo-debuginfoUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade libzip-develUpgrade php-common-debuginfoUpgrade php-embeddedUpgrade php-gd-debuginfoUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade libzip-debugsourceUpgrade php-fpmUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mysqlUpgrade php-gdUpgrade php-dbaUpgrade php-recodeUpgrade php-recode-debuginfoUpgrade php-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-pearUpgrade php-pspellUpgrade php-snmpUpgrade libzip-tools-debuginfo | Apr 1, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-soapUpgrade php-gdUpgrade phpUpgrade php-pgsqlUpgrade php-odbcUpgrade php-processUpgrade php-recodeUpgrade php-mysqlUpgrade php-commonUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-cliUpgrade php-ldap | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pgsqlUpgrade php-processUpgrade php-xmlrpcUpgrade php-commonUpgrade php-gdUpgrade php-odbcUpgrade php-pdoUpgrade php-soapUpgrade php-mysqlUpgrade php-cliUpgrade phpUpgrade php-ldapUpgrade php-recodeUpgrade php-xml | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-gdUpgrade phpUpgrade php-pdoUpgrade php-recodeUpgrade php-soapUpgrade php-ldapUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-cliUpgrade php-commonUpgrade php-xmlUpgrade php-pgsqlUpgrade php-process | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-pecl-apcuUpgrade php-develUpgrade php-jsonUpgrade php-pdoUpgrade libzipUpgrade php-intlUpgrade php-cliUpgrade php-commonUpgrade php-ldapUpgrade php-odbcUpgrade apcu-panelUpgrade php-snmpUpgrade php-dbgUpgrade phpUpgrade libzip-develUpgrade php-gmpUpgrade php-fpmUpgrade php-pearUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-xmlUpgrade php-gdUpgrade php-enchantUpgrade php-mysqlUpgrade php-recodeUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-mbstringUpgrade php-pspellUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-processUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade php-dbaUpgrade php-embedded | Oct 5, 2022 | Feb 22, 2019 |
| Php | — | Upgrade to PHP version 5.6.40Upgrade to PHP version 7.3.1Upgrade to PHP version 7.2.14 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-odbc-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pearUpgrade php-commonUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php-pspellUpgrade php-pecl-zipUpgrade php-fpmNo solution existsUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gdUpgrade php-mysqlUpgrade php-pecl-zip-debugsourceUpgrade libzipUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-pdoUpgrade php-soapUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbcUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade php-develUpgrade php-xml-debuginfoUpgrade libzip-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-embeddedUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dbaUpgrade php-embedded-debuginfoUpgrade php-processUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-intlUpgrade php-snmpUpgrade php-bcmath-debuginfoUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-dbgUpgrade php-ldapUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-recode-debuginfoUpgrade apcu-panelUpgrade php-json-debuginfoUpgrade php-xmlUpgrade php-cliUpgrade phpUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-recodeUpgrade php-ldap-debuginfoUpgrade php-enchantUpgrade php-snmp-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade php-opcache | Apr 1, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-mbstringUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-commonUpgrade php-bcmathUpgrade php-recode-debuginfoUpgrade php-opcache-debuginfoUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade php-gmpUpgrade php-pecl-zip-debugsourceUpgrade php-intl-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-enchant-debuginfoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade php-develUpgrade php-gdUpgrade libzipUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-processUpgrade php-gmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dbaUpgrade php-recodeUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-embedded-debuginfoUpgrade php-debuginfoUpgrade libzip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-ldapUpgrade php-cli-debuginfoUpgrade php-debugsourceUpgrade php-snmpUpgrade php-bcmath-debuginfoUpgrade php-common-debuginfoUpgrade php-enchantUpgrade php-odbcUpgrade libzip-develUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-soap-debuginfoUpgrade php-cliUpgrade libzip-toolsUpgrade libzip-debugsource | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php7-gdUpgrade php53-sysvshmUpgrade php7-bz2Upgrade php5-bz2Upgrade php72-posixUpgrade php7-sysvshmUpgrade php53-pearUpgrade php53-socketsUpgrade php53-xmlreaderUpgrade php53-pspellUpgrade php7-calendarUpgrade php5-snmpUpgrade php5-opcacheUpgrade php53-xmlrpcUpgrade php53-pdoUpgrade libtidy-0_99-0Upgrade php72-sysvmsgUpgrade php7-tidyUpgrade php7-mcryptUpgrade php7-opcacheUpgrade php72-develUpgrade php5-calendarUpgrade php72-wddxUpgrade php5-gmpUpgrade php7-curlUpgrade php5-mysqlUpgrade php7Upgrade php7-gettextUpgrade php5-develUpgrade php5-soapUpgrade php72-pgsqlUpgrade php53-zlibUpgrade php5-pharUpgrade php53-shmopUpgrade php53-readlineUpgrade php7-pearUpgrade php7-pspellUpgrade php7-soapUpgrade php5-xmlreaderUpgrade php5-sysvsemUpgrade php5-pgsqlUpgrade php72-intlUpgrade php5-enchantUpgrade php72-sysvshmUpgrade php5-jsonUpgrade php5-sqliteUpgrade php5-curlUpgrade php53-bcmathUpgrade php53-fastcgiUpgrade php7-pcntlUpgrade php72-gdUpgrade php53-imapUpgrade php7-gmpUpgrade php72-mbstringUpgrade php7-embedUpgrade php53-posixUpgrade php72Upgrade php7-firebirdUpgrade php72-imapUpgrade php7-xslUpgrade php53-xslUpgrade php72-zlibUpgrade php7-domUpgrade php72-tokenizerUpgrade php53-odbcUpgrade php53-pgsqlUpgrade php7-socketsUpgrade libmemcached-develUpgrade php5-pcntlUpgrade php53-gmpUpgrade php72-shmopUpgrade php7-imapUpgrade php53-gdUpgrade php5Upgrade php72-domUpgrade php53-snmpUpgrade php53-ctypeUpgrade php72-sysvsemUpgrade php72-pearUpgrade php72-opcacheUpgrade php53-mcryptUpgrade php7-zipUpgrade php53-bz2Upgrade php5-pdoUpgrade php53-ldapUpgrade php5-tokenizerUpgrade php53-iconvUpgrade php72-xslUpgrade php7-intlUpgrade php7-sodiumUpgrade php72-pdoUpgrade php7-xmlreaderUpgrade php5-ftpUpgrade libtidy-0_99-0-develUpgrade php7-exifUpgrade php72-ctypeUpgrade php72-enchantUpgrade php72-bcmathUpgrade php5-shmopUpgrade php53-dbaUpgrade php5-odbcUpgrade php5-bcmathUpgrade php5-dbaUpgrade php53-zipUpgrade php72-pcntlUpgrade tidyUpgrade php72-exifUpgrade php72-fpmUpgrade php5-mcryptUpgrade php72-bz2Upgrade php72-dbaUpgrade php7-xmlrpcUpgrade php5-ldapUpgrade php72-fileinfoUpgrade php7-mysqlUpgrade apache2-mod_php53Upgrade php7-mbstringUpgrade php53-domUpgrade php72-pharUpgrade php7-enchantUpgrade php53-sqliteUpgrade php5-zlibUpgrade php72-socketsUpgrade libmemcached11Upgrade libmemcachedUpgrade php7-jsonUpgrade libmemcachedutil2Upgrade php5-sysvshmUpgrade php7-ctypeUpgrade php53-jsonUpgrade php7-bcmathUpgrade apache2-mod_php5Upgrade php5-xmlwriterUpgrade php5-wddxUpgrade php5-fastcgiUpgrade php5-opensslUpgrade php5-imapUpgrade php5-gettextUpgrade php7-zlibUpgrade php72-fastcgiUpgrade php7-tokenizerUpgrade php53-curlUpgrade php53Upgrade php5-fileinfoUpgrade php72-sqliteUpgrade php72-xmlrpcUpgrade php72-opensslUpgrade php72-gmpUpgrade php7-shmopUpgrade php53-suhosinUpgrade php53-ftpUpgrade php5-zipUpgrade php5-pspellUpgrade php53-exifUpgrade php5-exifUpgrade php5-suhosinUpgrade php53-calendarUpgrade php72-soapUpgrade php72-pspellUpgrade php7-xmlwriterUpgrade php53-wddxUpgrade php53-xmlwriterUpgrade php53-tokenizerUpgrade php7-pear-archive_tarUpgrade php53-pcntlUpgrade php53-soapUpgrade php72-jsonUpgrade php72-ldapUpgrade php53-mysqlUpgrade php72-curlUpgrade php7-sysvsemUpgrade php5-fpmUpgrade php72-ftpUpgrade php7-opensslUpgrade php7-ldapUpgrade php72-odbcUpgrade php7-sqliteUpgrade apache2-mod_php72Upgrade php5-intlUpgrade php5-iconvUpgrade php72-gettextUpgrade php7-pdoUpgrade php53-tidyUpgrade php7-pgsqlUpgrade php7-dbaUpgrade php5-pearUpgrade php72-mysqlUpgrade php5-gdUpgrade php7-posixUpgrade php7-develUpgrade php72-pear-archive_tarUpgrade php72-calendarUpgrade php72-xmlwriterUpgrade php7-sysvmsgUpgrade php53-intlUpgrade php53-sysvsemUpgrade php72-xmlreaderUpgrade php7-readlineUpgrade php5-sysvmsgUpgrade php72-memcachedUpgrade apache2-mod_php7Upgrade php53-gettextUpgrade php72-snmpUpgrade php72-readlineUpgrade php7-testresultsUpgrade php7-pharUpgrade php5-xslUpgrade php7-odbcUpgrade php72-tidyUpgrade php53-mbstringUpgrade php53-develUpgrade php5-socketsUpgrade php5-domUpgrade php5-ctypeUpgrade php7-fileinfoUpgrade php5-mbstringUpgrade php53-fileinfoUpgrade php7-fpmUpgrade php7-fastcgiUpgrade php72-iconvUpgrade php7-snmpUpgrade php7-iconvUpgrade php7-ftpUpgrade php53-sysvmsgUpgrade php5-posixUpgrade php53-opensslUpgrade php72-zipUpgrade php7-wddxUpgrade php5-xmlrpc | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php5-fpmUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php7.0-cgiUpgrade php5-cgiUpgrade php7.0-mbstringUpgrade php7.0-fpmUpgrade php5-xmlrpcUpgrade php7.0-cliUpgrade libapache2-mod-php7.0Upgrade php7.0-xmlrpc | Mar 15, 2019 | Feb 22, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub