Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-gmpUpgrade libzipUpgrade php-pecl-apcuUpgrade php-soapUpgrade php-odbcUpgrade php-develUpgrade php-mbstringUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-pgsqlUpgrade php-pearUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-gdUpgrade php-pecl-xdebugUpgrade phpUpgrade php-mysqlndUpgrade php-processUpgrade php-pecl-rrdUpgrade php-cliUpgrade apcu-panelUpgrade libzip-develUpgrade php-ffiUpgrade php-commonUpgrade php-ldapUpgrade php-dbgUpgrade php-xmlUpgrade libzip-toolsUpgrade php-intlUpgrade php-opcacheUpgrade php-embeddedUpgrade php-snmpUpgrade php-dba | Oct 20, 2022 | Nov 19, 2020 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Nov 19, 2020 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Jan 8, 2021 | Nov 19, 2020 |
| Amazon_linux | — | Upgrade php7-pear | Jan 15, 2021 | Nov 19, 2020 |
| Centos_linux | — | Upgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-debuginfoUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade libzip-develUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade libzip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-opcacheUpgrade php-commonUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-json-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebugUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-develUpgrade php-mysqlndUpgrade php-pearUpgrade php-ffi-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstringUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gmp-debuginfoUpgrade libzipUpgrade php-processUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-ffiUpgrade php-pecl-apcu-develUpgrade php-xmlrpc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-cli-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmathUpgrade php-debugsourceUpgrade apcu-panelUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-odbc-debuginfoUpgrade php-intlUpgrade php-dbaUpgrade phpUpgrade libzip-toolsUpgrade php-enchantUpgrade php-soapUpgrade php-pecl-zip-debugsourceUpgrade libzip-debugsourceUpgrade php-intl-debuginfo | Oct 20, 2022 | Nov 19, 2020 |
| Debian | — | Upgrade php-pear | Nov 24, 2020 | Nov 19, 2020 |
| Drupal | — | Upgrade to drupal version 9.0.9Upgrade to drupal version 8.9.1Upgrade to drupal version 8.8.1Upgrade to drupal version 7.75 | Nov 27, 2020 | Nov 19, 2020 |
| Gentoo Linux | — | Upgrade dev-php/PEAR-Archive_Tar. | Jan 26, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Feb 2, 2021 | Nov 19, 2020 |
| Oracle Solaris | — | Upgrade web/php-80 to version 8.0.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.27-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.15-11.4.32.0.1.88.2 on Solaris 11.4 | Apr 21, 2021 | Nov 19, 2020 |
| Oracle_linux | — | Upgrade php-pecl-rrdUpgrade php-intlUpgrade php-mysqlndUpgrade php-cliUpgrade php-commonUpgrade php-opcacheUpgrade phpUpgrade libzip-develUpgrade php-dbaUpgrade php-ffiUpgrade php-odbcUpgrade apcu-panelUpgrade php-processUpgrade php-snmpUpgrade libzip-toolsUpgrade php-gdUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-gmpUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-dbgUpgrade php-develUpgrade php-xmlUpgrade php-ldapUpgrade php-bcmathUpgrade php-fpmUpgrade php-pearUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-mbstringUpgrade php-enchantUpgrade php-jsonUpgrade php-pecl-apcu-devel | Sep 17, 2022 | Nov 19, 2020 |
| Redhat_linux | — | Upgrade php-odbc-debuginfoUpgrade libzip-tools-debuginfoNo solution existsUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-develUpgrade php-ffi-debuginfoUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-pearUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-mbstringUpgrade php-commonUpgrade libzipUpgrade php-debugsourceUpgrade php-xmlrpcUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-ldapUpgrade php-bcmathUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-enchantUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlndUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pdo-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-pecl-apcu-debugsourceUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debuginfoUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-soapUpgrade php-cli-debuginfoUpgrade php-cliUpgrade php-ffiUpgrade libzip-toolsUpgrade php-odbcUpgrade php-processUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-ldap-debuginfoUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gmp-debuginfoUpgrade php-dba-debuginfoUpgrade php-process-debuginfoUpgrade php-snmpUpgrade phpUpgrade php-json-debuginfoUpgrade php-intl-debuginfoUpgrade php-bcmath-debuginfo | Oct 20, 2022 | Nov 19, 2020 |
| Rocky_linux | — | Upgrade php-pecl-xdebugUpgrade php-dba-debuginfoUpgrade php-pecl-apcuUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-mbstringUpgrade php-odbc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-enchant-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-pdo-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pgsqlUpgrade php-gmpUpgrade php-commonUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-intl-debuginfoUpgrade php-jsonUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-ldap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-embeddedUpgrade libzip-develUpgrade php-enchantUpgrade libzip-debugsourceUpgrade libzipUpgrade php-mysqlndUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-gdUpgrade php-cliUpgrade php-ffi-debuginfoUpgrade php-dbgUpgrade php-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-cli-debuginfoUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-intlUpgrade php-embedded-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-ffiUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-dbaUpgrade php | Mar 12, 2024 | Nov 19, 2020 |
| Ubuntu | — | Upgrade drupal7 (Ubuntu Pro)Upgrade php-pear | Dec 2, 2020 | Nov 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub