Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-develUpgrade php-pgsqlUpgrade php-gdUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-enchantUpgrade php-bcmathUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-gmpUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-pdoUpgrade php-odbcUpgrade php-xmlUpgrade php-opcacheUpgrade php-embeddedUpgrade libzip-toolsUpgrade php-processUpgrade php-ldapUpgrade php-dbgUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-snmpUpgrade apcu-panelUpgrade phpUpgrade php-dbaUpgrade php-ffiUpgrade php-cliUpgrade php-mysqlndUpgrade php-commonUpgrade libzip-devel | Oct 20, 2022 | Nov 19, 2020 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Nov 19, 2020 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Jan 8, 2021 | Nov 19, 2020 |
| Amazon_linux | — | Upgrade php7-pear | Jan 15, 2021 | Nov 19, 2020 |
| Centos_linux | — | Upgrade php-processUpgrade libzipUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade php-pecl-zipUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-embeddedUpgrade php-ffiUpgrade php-pdoUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-bcmathUpgrade php-cli-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-intlUpgrade php-mbstringUpgrade php-xmlrpc-debuginfoUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-jsonUpgrade phpUpgrade php-dbgUpgrade php-debuginfoUpgrade php-pearUpgrade php-mysqlndUpgrade php-develUpgrade php-opcache-debuginfoUpgrade php-ldapUpgrade libzip-debuginfoUpgrade php-fpmUpgrade php-cliUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade libzip-develUpgrade php-mbstring-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-enchant-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-mysqlnd-debuginfoUpgrade php-ffi-debuginfoUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade php-xmlUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu | Oct 20, 2022 | Nov 19, 2020 |
| Debian | — | Upgrade php-pear | Nov 24, 2020 | Nov 19, 2020 |
| Drupal | — | Upgrade to drupal version 8.9.1Upgrade to drupal version 9.0.9Upgrade to drupal version 8.8.1Upgrade to drupal version 7.75 | Nov 27, 2020 | Nov 19, 2020 |
| Gentoo Linux | — | Upgrade dev-php/PEAR-Archive_Tar. | Jan 26, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Feb 2, 2021 | Nov 19, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.15-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-80 to version 8.0.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.27-11.4.32.0.1.88.2 on Solaris 11.4 | Apr 21, 2021 | Nov 19, 2020 |
| Oracle_linux | — | Upgrade php-fpmUpgrade php-gdUpgrade php-pgsqlUpgrade libzipUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-soapUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-gmpUpgrade php-embeddedUpgrade php-pearUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-enchantUpgrade php-dbgUpgrade php-xmlUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade apcu-panelUpgrade php-intlUpgrade php-opcacheUpgrade php-processUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-ffiUpgrade php-cliUpgrade php-odbcUpgrade phpUpgrade php-dbaUpgrade php-commonUpgrade libzip-toolsUpgrade php-snmpUpgrade libzip-devel | Sep 17, 2022 | Nov 19, 2020 |
| Redhat_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-xdebug-debuginfoUpgrade php-ldapUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdoUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-gmpUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-embeddedUpgrade php-commonUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-fpmUpgrade php-pearUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade libzipUpgrade php-ffi-debuginfoUpgrade php-xml-debuginfoNo solution existsUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-gmp-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade libzip-toolsUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-opcacheUpgrade php-ffiUpgrade apcu-panelUpgrade php-odbcUpgrade php-soapUpgrade libzip-debugsourceUpgrade php-pgsqlUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-cliUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-pdo-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-fpm-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade php-snmpUpgrade php-json-debuginfoUpgrade php-cli-debuginfoUpgrade php-processUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-gdUpgrade libzip-debuginfo | Oct 20, 2022 | Nov 19, 2020 |
| Rocky_linux | — | Upgrade php-xml-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade php-processUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-soapUpgrade php-common-debuginfoUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-fpmUpgrade php-pdoUpgrade php-dbg-debuginfoUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-bcmathUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-process-debuginfoUpgrade php-mysqlndUpgrade libzipUpgrade libzip-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-ffiUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-embedded-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-snmpUpgrade libzip-debuginfoUpgrade php-ldapUpgrade php-ffi-debuginfoUpgrade php-dbgUpgrade php-gmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-enchantUpgrade libzip-toolsUpgrade libzip-develUpgrade php-embeddedUpgrade php-debuginfoUpgrade php-cliUpgrade php-cli-debuginfoUpgrade php-opcacheUpgrade php-gdUpgrade php-gd-debuginfoUpgrade phpUpgrade php-json-debuginfoUpgrade php-dbaUpgrade php-odbc | Mar 12, 2024 | Nov 19, 2020 |
| Ubuntu | — | Upgrade drupal7 (Ubuntu Pro)Upgrade php-pear | Dec 2, 2020 | Nov 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub