Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-pecl-rrdUpgrade php-ffiUpgrade php-processUpgrade php-xmlUpgrade php-embeddedUpgrade php-intlUpgrade php-mysqlndUpgrade libzip-toolsUpgrade libzip-develUpgrade apcu-panelUpgrade php-opcacheUpgrade php-ldapUpgrade php-cliUpgrade phpUpgrade php-dbgUpgrade php-dbaUpgrade php-snmpUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-pgsqlUpgrade php-enchantUpgrade php-pearUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-develUpgrade php-mbstringUpgrade php-pdoUpgrade php-odbcUpgrade php-soapUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-bcmath | Oct 20, 2022 | Nov 19, 2020 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Nov 19, 2020 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Jan 8, 2021 | Nov 19, 2020 |
| Amazon_linux | — | Upgrade php7-pear | Jan 15, 2021 | Nov 19, 2020 |
| Centos_linux | — | Upgrade php-dbgUpgrade php-debuginfoUpgrade php-commonUpgrade php-dba-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlUpgrade php-opcacheUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-ffi-debuginfoUpgrade libzip-debuginfoUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-ldapUpgrade php-mysqlnd-debuginfoUpgrade libzip-develUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debuginfoUpgrade php-pearUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlndUpgrade php-xmlrpc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade php-odbc-debuginfoUpgrade php-intlUpgrade php-enchantUpgrade libzipUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade apcu-panelUpgrade php-fpm-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-debugsourceUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade phpUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-xml-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-bcmathUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-pgsqlUpgrade php-gdUpgrade php-embedded-debuginfoUpgrade php-soapUpgrade php-ffiUpgrade php-embeddedUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-intl-debuginfoUpgrade php-gmp-debuginfo | Oct 20, 2022 | Nov 19, 2020 |
| Debian | — | Upgrade php-pear | Nov 24, 2020 | Nov 19, 2020 |
| Drupal | — | Upgrade to drupal version 8.8.1Upgrade to drupal version 7.75Upgrade to drupal version 8.9.1Upgrade to drupal version 9.0.9 | Nov 27, 2020 | Nov 19, 2020 |
| Gentoo Linux | — | Upgrade dev-php/PEAR-Archive_Tar. | Jan 26, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Feb 2, 2021 | Nov 19, 2020 |
| Oracle Solaris | — | Upgrade web/php-80 to version 8.0.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.27-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.15-11.4.32.0.1.88.2 on Solaris 11.4 | Apr 21, 2021 | Nov 19, 2020 |
| Oracle_linux | — | Upgrade phpUpgrade php-mysqlndUpgrade apcu-panelUpgrade libzip-develUpgrade php-opcacheUpgrade php-odbcUpgrade php-commonUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-snmpUpgrade php-intlUpgrade php-ffiUpgrade php-processUpgrade php-cliUpgrade php-dbaUpgrade php-dbgUpgrade php-develUpgrade php-xmlUpgrade php-gdUpgrade php-bcmathUpgrade php-gmpUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-embeddedUpgrade php-soapUpgrade libzipUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-json | Sep 17, 2022 | Nov 19, 2020 |
| Redhat_linux | — | Upgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-gdUpgrade php-pdo-debuginfoUpgrade php-opcacheUpgrade libzip-debuginfoUpgrade apcu-panelUpgrade php-process-debuginfoUpgrade php-processUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-cliUpgrade php-ffiUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-mysqlndUpgrade php-gmp-debuginfoUpgrade php-pecl-rrdUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-pgsql-debuginfoUpgrade php-dbaUpgrade phpUpgrade libzip-develUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-odbcUpgrade php-odbc-debuginfoUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-enchantUpgrade php-jsonUpgrade php-mysqlnd-debuginfoUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-embedded-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gmpNo solution existsUpgrade php-xml-debuginfoUpgrade php-develUpgrade php-pdoUpgrade php-ldapUpgrade php-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pearUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-xmlrpc-debuginfoUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-dbgUpgrade libzipUpgrade php-pecl-xdebug-debuginfo | Oct 20, 2022 | Nov 19, 2020 |
| Rocky_linux | — | Upgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-enchant-debuginfoUpgrade php-jsonUpgrade php-commonUpgrade php-pgsqlUpgrade php-pecl-zip-debugsourceUpgrade php-xml-debuginfoUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-opcache-debuginfoUpgrade php-soapUpgrade php-xmlUpgrade php-develUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-gdUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade phpUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ffiUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-intlUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-debuginfoUpgrade php-dbgUpgrade php-pecl-rrd-debugsourceUpgrade php-ffi-debuginfoUpgrade php-mysqlndUpgrade libzip-debugsourceUpgrade libzipUpgrade php-opcacheUpgrade libzip-debuginfoUpgrade php-cli-debuginfoUpgrade php-cliUpgrade php-gd-debuginfoUpgrade libzip-develUpgrade php-enchant | Mar 12, 2024 | Nov 19, 2020 |
| Ubuntu | — | Upgrade php-pearUpgrade drupal7 (Ubuntu Pro) | Dec 2, 2020 | Nov 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub