The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 11, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlUpgrade php-pdoUpgrade php-processUpgrade php-gdUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-cliUpgrade php-odbcUpgrade php-ldapUpgrade php-commonUpgrade php-soapUpgrade php | Aug 31, 2020 | Mar 11, 2019 |
| Php | — | Upgrade to PHP version 7.3.3 | Mar 12, 2019 | Mar 11, 2019 |
| Suse | — | Upgrade apache2-mod_php5Upgrade php7Upgrade php7-socketsUpgrade php7-bz2Upgrade php5-exifUpgrade php7-domUpgrade php7-dbaUpgrade php5-ftpUpgrade php5-snmpUpgrade php53-gmpUpgrade php53-posixUpgrade php53-socketsUpgrade php72-ctypeUpgrade php72-ftpUpgrade php53-snmpUpgrade php72-pear-archive_tarUpgrade php72-snmpUpgrade php53-fastcgiUpgrade php53-odbcUpgrade php7-sysvmsgUpgrade php7-shmopUpgrade php5-xmlreaderUpgrade php7-gmpUpgrade apache2-mod_php53Upgrade php7-exifUpgrade php53-ctypeUpgrade php53-gettextUpgrade php72-sysvsemUpgrade php53-readlineUpgrade php53-opensslUpgrade php53-suhosinUpgrade php7-mysqlUpgrade php72-odbcUpgrade php7-imapUpgrade apache2-mod_php7Upgrade php7-zlibUpgrade php5-wddxUpgrade php7-odbcUpgrade php7-firebirdUpgrade php72-zlibUpgrade php53-curlUpgrade php5-iconvUpgrade php72-gmpUpgrade php72-iconvUpgrade php7-xslUpgrade php7-posixUpgrade php7-sqliteUpgrade php53-sysvmsgUpgrade php53-ftpUpgrade php5-bz2Upgrade php7-develUpgrade php53-iconvUpgrade php72-readlineUpgrade php53-wddxUpgrade php53-gdUpgrade php5-pdoUpgrade php5-xmlwriterUpgrade php72-tidyUpgrade php5-domUpgrade php53-dbaUpgrade php72-exifUpgrade php5-jsonUpgrade php53-zipUpgrade php53-xmlwriterUpgrade php7-pear-archive_tarUpgrade php7-zipUpgrade php53-xmlreaderUpgrade php72-xmlrpcUpgrade php72-xmlwriterUpgrade php53-pearUpgrade php5-soapUpgrade php53-bz2Upgrade php53-pcntlUpgrade php53-sysvshmUpgrade php7-embedUpgrade php72-gettextUpgrade php5-opcacheUpgrade php7-gettextUpgrade php7-pgsqlUpgrade php72-fileinfoUpgrade php53-tidyUpgrade php7-sodiumUpgrade php72-enchantUpgrade php7-soapUpgrade php53-imapUpgrade php7-ldapUpgrade php5-pharUpgrade php53-mbstringUpgrade php53-shmopUpgrade php72-xmlreaderUpgrade php5-mbstringUpgrade php5-mcryptUpgrade php5-gmpUpgrade php7-pearUpgrade php5-zipUpgrade php72-opcacheUpgrade php53Upgrade php72-sysvshmUpgrade php7-opcacheUpgrade php72-fpmUpgrade php5-imapUpgrade php53-zlibUpgrade php53-pdoUpgrade php5-sysvsemUpgrade php5-xmlrpcUpgrade php72-pgsqlUpgrade php7-tidyUpgrade php7-gdUpgrade php72-bcmathUpgrade php72Upgrade php7-iconvUpgrade php53-exifUpgrade php7-pdoUpgrade php53-pspellUpgrade php7-xmlreaderUpgrade php5-gettextUpgrade php7-fpmUpgrade php7-xmlrpcUpgrade php7-readlineUpgrade php7-ftpUpgrade php7-bcmathUpgrade php72-ldapUpgrade php7-wddxUpgrade php7-pspellUpgrade php5-odbcUpgrade php72-curlUpgrade php5Upgrade php7-opensslUpgrade php5-bcmathUpgrade php72-develUpgrade php53-soapUpgrade php53-xmlrpcUpgrade php7-calendarUpgrade php72-opensslUpgrade php53-xslUpgrade php72-mbstringUpgrade php72-shmopUpgrade php72-zipUpgrade php7-fastcgiUpgrade php53-sqliteUpgrade php5-sysvmsgUpgrade php5-mysqlUpgrade php5-ctypeUpgrade php5-intlUpgrade php5-fpmUpgrade php7-mbstringUpgrade php72-xslUpgrade php72-tokenizerUpgrade php72-pearUpgrade php72-pcntlUpgrade php72-dbaUpgrade php7-sysvshmUpgrade php7-curlUpgrade php53-tokenizerUpgrade php5-zlibUpgrade php72-bz2Upgrade php5-dbaUpgrade php72-posixUpgrade php5-fileinfoUpgrade php72-sysvmsgUpgrade php72-wddxUpgrade php5-curlUpgrade php72-socketsUpgrade php5-socketsUpgrade php5-enchantUpgrade php72-gdUpgrade php53-intlUpgrade php7-jsonUpgrade php72-sqliteUpgrade php72-soapUpgrade php72-pharUpgrade php72-domUpgrade php72-calendarUpgrade php7-xmlwriterUpgrade php5-opensslUpgrade php53-sysvsemUpgrade php7-pharUpgrade php7-intlUpgrade php7-mcryptUpgrade php5-suhosinUpgrade php53-ldapUpgrade php5-pearUpgrade php5-shmopUpgrade php53-mcryptUpgrade php72-mysqlUpgrade php5-calendarUpgrade php7-sysvsemUpgrade php7-enchantUpgrade php72-pdoUpgrade php7-snmpUpgrade php72-imapUpgrade php5-pgsqlUpgrade php53-bcmathUpgrade php5-gdUpgrade php5-xslUpgrade php5-sysvshmUpgrade php53-develUpgrade php5-posixUpgrade php53-fileinfoUpgrade php5-pcntlUpgrade php5-tokenizerUpgrade php53-jsonUpgrade php5-fastcgiUpgrade apache2-mod_php72Upgrade php5-pspellUpgrade php5-sqliteUpgrade php72-intlUpgrade php7-testresultsUpgrade php53-domUpgrade php5-develUpgrade php5-ldapUpgrade php7-fileinfoUpgrade php72-pspellUpgrade php53-mysqlUpgrade php53-pgsqlUpgrade php53-calendarUpgrade php72-fastcgiUpgrade php7-ctypeUpgrade php7-pcntlUpgrade php7-tokenizerUpgrade php72-json | Apr 6, 2019 | Mar 11, 2019 |
| Ubuntu | — | Upgrade php5-xmlrpcUpgrade php5-fpmUpgrade libapache2-mod-php5Upgrade php5-cliUpgrade php5-cgi | May 1, 2019 | Mar 11, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub