An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-embeddedUpgrade php-enchantUpgrade phpUpgrade php-gdUpgrade libzip-toolsUpgrade libzipUpgrade php-mysqlndUpgrade php-ldapUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-processUpgrade php-xmlUpgrade php-cliUpgrade php-jsonUpgrade php-pgsqlUpgrade php-commonUpgrade php-gmpUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-dbgUpgrade php-mbstringUpgrade php-fpmUpgrade php-soapUpgrade php-develUpgrade php-odbcUpgrade php-recodeUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-bcmathUpgrade php-intlUpgrade php-pearUpgrade php-snmp | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade php73Upgrade php72Upgrade php71 | Sep 19, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-develUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-pdoUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-pdo-debuginfoUpgrade php-gd-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zipUpgrade php-pearUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gdUpgrade php-pecl-zip-debuginfoUpgrade php-soapUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-enchantUpgrade php-debugsourceUpgrade php-xml-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-cliUpgrade php-processUpgrade php-pecl-apcu-debugsourceUpgrade phpUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-json-debuginfoUpgrade php-gmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-common-debuginfoUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade php-dbaUpgrade php-snmp-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcu-debuginfoUpgrade apcu-panelUpgrade php-mbstring-debuginfoUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-intl | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pgsqlUpgrade php-odbcUpgrade php-soapUpgrade php-pdoUpgrade php-commonUpgrade php-ldapUpgrade php-cliUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-xmlUpgrade phpUpgrade php-processUpgrade php-mysqlUpgrade php-gd | May 7, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-ldapUpgrade php-pgsqlUpgrade php-odbcUpgrade php-soapUpgrade phpUpgrade php-commonUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade php-xmlUpgrade php-pdoUpgrade php-cliUpgrade php-mysql | May 7, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-soapUpgrade phpUpgrade php-processUpgrade php-odbcUpgrade php-gdUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-pdoUpgrade php-ldapUpgrade php-recodeUpgrade php-mysqlUpgrade php-commonUpgrade php-cli | May 7, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade libzip-toolsUpgrade php-dbaUpgrade php-odbcUpgrade php-ldapUpgrade apcu-panelUpgrade php-intlUpgrade php-enchantUpgrade php-processUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-commonUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade phpUpgrade php-gdUpgrade php-pgsqlUpgrade php-cliUpgrade php-develUpgrade php-embeddedUpgrade libzip-develUpgrade php-gmpUpgrade php-mysqlndUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-recodeUpgrade php-fpmUpgrade libzipUpgrade php-bcmathUpgrade php-xmlUpgrade php-mbstringUpgrade php-pdoUpgrade php-snmpUpgrade php-pearUpgrade php-xmlrpc | Jul 22, 2024 | Feb 18, 2019 |
| Php | — | Upgrade to PHP version 7.3.3Upgrade to PHP version 7.2.16Upgrade to PHP version 7.1.27 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-jsonUpgrade php-commonUpgrade php-ldapUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbc-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-pdo-debuginfoUpgrade apcu-panelUpgrade php-gmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-pecl-zipUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade phpUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-mbstring-debuginfoUpgrade php-gmpUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade libzip-toolsNo solution existsUpgrade php-soapUpgrade php-fpm-debuginfoUpgrade php-fpmUpgrade php-debugsourceUpgrade libzip-develUpgrade php-mbstringUpgrade php-cliUpgrade php-pecl-apcu-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-snmp-debuginfoUpgrade php-enchantUpgrade php-snmpUpgrade php-processUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade libzipUpgrade php-embeddedUpgrade php-enchant-debuginfoUpgrade php-xmlUpgrade php-develUpgrade php-pearUpgrade php-pecl-zip-debugsourceUpgrade php-recodeUpgrade php-recode-debuginfoUpgrade php-gd | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-mysqlndUpgrade php-recode-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-apcuUpgrade libzipUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-jsonUpgrade php-bcmathUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpcUpgrade php-cliUpgrade php-opcacheUpgrade php-develUpgrade php-pecl-apcu-debuginfoUpgrade php-common-debuginfoUpgrade php-snmpUpgrade php-intl-debuginfoUpgrade php-gmpUpgrade php-xmlUpgrade php-processUpgrade php-xmlrpc-debuginfoUpgrade php-pdoUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-fpmUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-recodeUpgrade php-pecl-apcu-develUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-process-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbaUpgrade php-ldapUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-soapUpgrade php-pecl-zip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-gdUpgrade php-snmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade phpUpgrade php-intlUpgrade php-gd-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-debuginfoUpgrade php-dbgUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-debugsourceUpgrade php-debuginfoUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-gmp-debuginfoUpgrade php-common | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php53-shmopUpgrade php7-exifUpgrade php53-mysqlUpgrade php53-pearUpgrade php5-opcacheUpgrade php72-ldapUpgrade php7-pdoUpgrade php7-intlUpgrade php72-domUpgrade php72-imapUpgrade php7-embedUpgrade php7-zipUpgrade php72-xmlreaderUpgrade php5-wddxUpgrade php5-zipUpgrade php7-tokenizerUpgrade php7-ctypeUpgrade php5-ftpUpgrade php5-fastcgiUpgrade php72-readlineUpgrade apache2-mod_php7Upgrade php72-pgsqlUpgrade php7-snmpUpgrade php7-sysvsemUpgrade php72-pearUpgrade php5-shmopUpgrade php72-fileinfoUpgrade php7-gmpUpgrade php72-dbaUpgrade php53-mcryptUpgrade php53-xmlwriterUpgrade php5-mcryptUpgrade php72-sysvsemUpgrade php53-ftpUpgrade php7-xmlreaderUpgrade php53-sysvshmUpgrade php72-sysvshmUpgrade php7-sysvshmUpgrade php7-jsonUpgrade php5-iconvUpgrade php7-calendarUpgrade php5-pharUpgrade php7-mcryptUpgrade php72-curlUpgrade php5-opensslUpgrade php5-zlibUpgrade php7-domUpgrade php72-ftpUpgrade php7-mbstringUpgrade php7-pear-archive_tarUpgrade php7-fileinfoUpgrade php53Upgrade php53-intlUpgrade php7-imapUpgrade php5-socketsUpgrade php7-opensslUpgrade php5-tokenizerUpgrade php7-firebirdUpgrade php5-suhosinUpgrade php5-mbstringUpgrade php5-ldapUpgrade apache2-mod_php53Upgrade php53-xmlrpcUpgrade php72-mysqlUpgrade php5-pearUpgrade php7Upgrade php5-bz2Upgrade php5-fileinfoUpgrade php7-gdUpgrade php72-pdoUpgrade php72-sqliteUpgrade php72-gdUpgrade php72-pcntlUpgrade php72-gettextUpgrade php72-calendarUpgrade php7-dbaUpgrade php7-tidyUpgrade php5-sqliteUpgrade php53-fileinfoUpgrade php53-ctypeUpgrade php7-pcntlUpgrade php7-testresultsUpgrade php72-iconvUpgrade php72-gmpUpgrade php53-sqliteUpgrade php53-sysvsemUpgrade php53-calendarUpgrade php5-mysqlUpgrade php5-pgsqlUpgrade php5-dbaUpgrade php72-xslUpgrade php53-zlibUpgrade php53-tokenizerUpgrade php7-develUpgrade php5-domUpgrade php5-gdUpgrade php7-shmopUpgrade php5-jsonUpgrade php5-soapUpgrade php72-pharUpgrade php5-xslUpgrade php53-pdoUpgrade php5-pspellUpgrade php72-tidyUpgrade php7-bz2Upgrade php53-gdUpgrade php53-xslUpgrade php72-mbstringUpgrade php72-develUpgrade php5-curlUpgrade php72-intlUpgrade php5-bcmathUpgrade php5-enchantUpgrade php72-pear-archive_tarUpgrade php5-exifUpgrade php72-wddxUpgrade php72-exifUpgrade php7-readlineUpgrade php7-ldapUpgrade php53-pcntlUpgrade php53-opensslUpgrade php5-sysvmsgUpgrade php5-gmpUpgrade php5-fpmUpgrade php72-zipUpgrade php7-sodiumUpgrade php72-opensslUpgrade php53-iconvUpgrade php7-xmlrpcUpgrade php5-odbcUpgrade apache2-mod_php72Upgrade php53-readlineUpgrade php5-snmpUpgrade php5-pdoUpgrade php7-odbcUpgrade php7-xslUpgrade php7-pspellUpgrade php53-snmpUpgrade php7-posixUpgrade php7-ftpUpgrade php7-opcacheUpgrade php53-develUpgrade php53-tidyUpgrade php53-jsonUpgrade php5Upgrade php7-soapUpgrade php7-pearUpgrade apache2-mod_php5 | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-fpmUpgrade php5-cliUpgrade php7.2-cgiUpgrade php7.0-cliUpgrade php7.0-cgiUpgrade php7.2-fpmUpgrade php7.2-cliUpgrade php5-xmlrpcUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.2Upgrade php7.0-fpmUpgrade libapache2-mod-php7.0 | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub