When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbgUpgrade php-pgsqlUpgrade php-intlUpgrade php-ldapUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-opcacheUpgrade phpUpgrade php-processUpgrade php-enchantUpgrade php-embeddedUpgrade php-fpmUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-jsonUpgrade apcu-panelUpgrade php-snmpUpgrade php-xmlUpgrade php-dbaUpgrade php-cliUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-soapUpgrade php-develUpgrade php-pearUpgrade php-bcmathUpgrade php-xmlrpcUpgrade libzipUpgrade php-mysqlndUpgrade php-recodeUpgrade libzip-develUpgrade php-gd | May 4, 2022 | Feb 10, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 10, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Mar 2, 2020 | Feb 10, 2020 |
| Centos_linux | — | Upgrade php-jsonUpgrade php-process-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade php-bcmathUpgrade php-recodeUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-intl-debuginfoUpgrade php-embeddedUpgrade php-enchantUpgrade php-odbc-debuginfoUpgrade php-pdoUpgrade php-mbstringUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-pdo-debuginfoUpgrade php-debugsourceUpgrade php-xmlrpcUpgrade libzip-tools-debuginfoUpgrade php-pecl-zipUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-processUpgrade php-soapUpgrade php-pgsql-debuginfoUpgrade php-cli-debuginfoUpgrade libzipUpgrade libzip-toolsUpgrade php-pecl-zip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-embedded-debuginfoUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade libzip-develUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade php-pearUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-debuginfoUpgrade php-gmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-ldapUpgrade php-fpmUpgrade php-mbstring-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-debugsourceUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-xml-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-develUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mysqlnd-debuginfo | Sep 9, 2020 | Feb 10, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2020 | Feb 10, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pdoUpgrade php-xmlrpcUpgrade php-gdUpgrade php-commonUpgrade php-xmlUpgrade php-mysqlUpgrade php-processUpgrade php-soapUpgrade phpUpgrade php-cliUpgrade php-ldapUpgrade php-recodeUpgrade php-odbcUpgrade php-pgsql | Nov 3, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-odbcUpgrade php-pgsqlUpgrade php-commonUpgrade php-mysqlUpgrade php-ldapUpgrade phpUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-cliUpgrade php-processUpgrade php-gdUpgrade php-pdoUpgrade php-soapUpgrade php-recode | Sep 28, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlUpgrade php-ldapUpgrade phpUpgrade php-fpmUpgrade php-cliUpgrade php-gdUpgrade php-recodeUpgrade php-soapUpgrade php-pdoUpgrade php-commonUpgrade php-processUpgrade php-xmlrpcUpgrade php-odbc | Jul 31, 2020 | Feb 10, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Feb 10, 2020 |
| Oracle_linux | — | Upgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-pearUpgrade php-soapUpgrade libzipUpgrade libzip-toolsUpgrade php-gdUpgrade php-enchantUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-gmpUpgrade php-mysqlndUpgrade php-processUpgrade php-dbaUpgrade php-opcacheUpgrade php-jsonUpgrade phpUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-commonUpgrade php-xmlUpgrade php-dbgUpgrade php-pdoUpgrade libzip-develUpgrade php-develUpgrade php-ldapUpgrade php-cliUpgrade php-bcmathUpgrade php-snmpUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-odbcUpgrade php-intl | Sep 10, 2020 | Jan 23, 2020 |
| Php | — | Upgrade to PHP version 7.4.2Upgrade to PHP version 7.2.27Upgrade to PHP version 7.3.14 | Feb 14, 2020 | Feb 10, 2020 |
| Redhat_linux | — | Upgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-xmlrpcUpgrade libzip-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pgsqlUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pearUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-xml-debuginfoUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-odbc-debuginfoUpgrade php-processUpgrade php-common-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-intlUpgrade php-gmp-debuginfoUpgrade php-jsonUpgrade libzip-tools-debuginfoUpgrade php-recodeUpgrade php-xmlUpgrade php-gdUpgrade php-pecl-zipUpgrade php-process-debuginfoUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-embeddedUpgrade php-pecl-zip-debuginfoNo solution existsUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-bcmathUpgrade php-pdoUpgrade php-debugsourceUpgrade php-develUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-recode-debuginfoUpgrade apcu-panelUpgrade php-enchantUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-gmpUpgrade libzip-develUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade phpUpgrade php-fpm-debuginfoUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-json-debuginfoUpgrade php-pgsql-debuginfo | Sep 9, 2020 | Feb 10, 2020 |
| Rocky_linux | — | Upgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-common-debuginfoUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade libzip-develUpgrade php-cli-debuginfoUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-recodeUpgrade php-dba-debuginfoUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-xmlrpcUpgrade php-process-debuginfoUpgrade php-processUpgrade php-mbstringUpgrade php-pecl-rrd-debugsourceUpgrade php-snmpUpgrade php-intl-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-rrdUpgrade php-commonUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dbaUpgrade php-opcacheUpgrade php-odbcUpgrade php-develUpgrade php-embeddedUpgrade php-json-debuginfoUpgrade php-fpmUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-embedded-debuginfoUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-debugsourceUpgrade php-pgsqlUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-jsonUpgrade phpUpgrade php-mbstring-debuginfoUpgrade php-xmlUpgrade php-gmpUpgrade php-gdUpgrade libzipUpgrade php-pecl-xdebug-debugsourceUpgrade php-xml-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-recode-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-enchantUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-enchant-debuginfo | Mar 12, 2024 | Feb 10, 2020 |
| Suse | — | Upgrade php5-xmlrpcUpgrade php72-pear-archive_tarUpgrade php5-gettextUpgrade php53-soapUpgrade php5-iconvUpgrade php7-tokenizerUpgrade php5-zipUpgrade php72-tidyUpgrade php53-sysvmsgUpgrade php53-sysvsemUpgrade php72-bz2Upgrade php53-ldapUpgrade php5-suhosinUpgrade php5-sysvshmUpgrade php72-readlineUpgrade php53-exifUpgrade php7-bcmathUpgrade php72-ldapUpgrade php72-domUpgrade php7-sysvsemUpgrade php7-fpmUpgrade php72-opensslUpgrade php5-xslUpgrade php7-snmpUpgrade php5-ctypeUpgrade php72-socketsUpgrade php72-jsonUpgrade php7-iconvUpgrade php53-tokenizerUpgrade php7-wddxUpgrade php72-calendarUpgrade php7-mbstringUpgrade php5-domUpgrade php72-xmlreaderUpgrade php7-fastcgiUpgrade php7-socketsUpgrade php72-imapUpgrade php5-posixUpgrade php53-calendarUpgrade php7-pdoUpgrade php53-ftpUpgrade php53-bcmathUpgrade php72-ctypeUpgrade php7-shmopUpgrade php5-imapUpgrade php72-pdoUpgrade php72-fastcgiUpgrade php72-tokenizerUpgrade php53-suhosinUpgrade php72-gmpUpgrade php7-ctypeUpgrade apache2-mod_php72Upgrade php7-jsonUpgrade php53-mysqlUpgrade php7-soapUpgrade php5-socketsUpgrade php7-xmlwriterUpgrade php5-intlUpgrade php53-gettextUpgrade php53-shmopUpgrade php7-develUpgrade php53-mbstringUpgrade php53-domUpgrade php5-fastcgiUpgrade php7-sysvmsgUpgrade php5-xmlwriterUpgrade php7-curlUpgrade php72-fpmUpgrade apache2-mod_php53Upgrade php7-zlibUpgrade php72-iconvUpgrade php72-sqliteUpgrade php7-pgsqlUpgrade php5-opensslUpgrade apache2-mod_php7Upgrade php72-mysqlUpgrade php72-xmlrpcUpgrade php72-curlUpgrade php5-opcacheUpgrade php72-ftpUpgrade php72-opcacheUpgrade php7-ftpUpgrade php7-pharUpgrade apache2-mod_php5Upgrade php53-wddxUpgrade php53-jsonUpgrade php5-zlibUpgrade php5-gdUpgrade php72-xmlwriterUpgrade php72-soapUpgrade php72-pspellUpgrade php53-bz2Upgrade php7-enchantUpgrade php7-odbcUpgrade php72-snmpUpgrade php53-curlUpgrade php72-odbcUpgrade php53-pgsqlUpgrade php5-develUpgrade php7-posixUpgrade php5-wddxUpgrade php5-ftpUpgrade php5-fileinfoUpgrade php72Upgrade php5-fpmUpgrade php53-fileinfoUpgrade php72-pharUpgrade php7-calendarUpgrade php72-zipUpgrade php72-enchantUpgrade php5-bcmathUpgrade php5-mysqlUpgrade php72-pcntlUpgrade php7-gmpUpgrade php7-gdUpgrade php5-sqliteUpgrade php5-jsonUpgrade php7-ldapUpgrade php5-ldapUpgrade php5-pspellUpgrade php5-odbcUpgrade php7-pcntlUpgrade php7-firebirdUpgrade php7-opensslUpgrade php7-gettextUpgrade php5-soapUpgrade php5-mcryptUpgrade php72-xslUpgrade php72-wddxUpgrade php72-exifUpgrade php7-xslUpgrade php7-pear-archive_tarUpgrade php7-sqliteUpgrade php7-bz2Upgrade php53-sysvshmUpgrade php5-tokenizerUpgrade php53-ctypeUpgrade php72-dbaUpgrade php7-embedUpgrade php53-xmlrpcUpgrade php72-sysvmsgUpgrade php72-pearUpgrade php72-bcmathUpgrade php53-zipUpgrade php7-sodiumUpgrade php7-exifUpgrade php5-mbstringUpgrade php7-tidyUpgrade php72-posixUpgrade php7-dbaUpgrade php7-fileinfoUpgrade php72-sodiumUpgrade php5-xmlreaderUpgrade php53-mcryptUpgrade php53-iconvUpgrade php53-pearUpgrade php53-xslUpgrade php7-zipUpgrade php7-testUpgrade php5-gmpUpgrade php5-snmpUpgrade php5-calendarUpgrade php72-intlUpgrade php72-gettextUpgrade php72-sysvshmUpgrade php5-enchantUpgrade php7-xmlrpcUpgrade php5-pearUpgrade php72-fileinfoUpgrade php72-pgsqlUpgrade php7-xmlreaderUpgrade php53-xmlreaderUpgrade php53-pspellUpgrade php53-pcntlUpgrade php5-pharUpgrade php7-intlUpgrade php53-zlibUpgrade php5-pdoUpgrade php5-pcntlUpgrade php7Upgrade php5-sysvmsgUpgrade php5-sysvsemUpgrade php5-curlUpgrade php5-bz2Upgrade php53-intlUpgrade php7-pearUpgrade php7-opcacheUpgrade php53-pdoUpgrade php53-opensslUpgrade php53-odbcUpgrade php53-gmpUpgrade php53-gdUpgrade php53-fastcgiUpgrade php53-dbaUpgrade php5-pgsqlUpgrade php5-exifUpgrade php72-sysvsemUpgrade php5Upgrade php53Upgrade php53-snmpUpgrade php7-readlineUpgrade php72-zlibUpgrade php72-shmopUpgrade php72-gdUpgrade php72-develUpgrade php7-mysqlUpgrade php7-domUpgrade php53-xmlwriterUpgrade php5-shmopUpgrade php5-dbaUpgrade php72-mbstringUpgrade php7-sysvshm | Feb 19, 2020 | Feb 10, 2020 |
| Ubuntu | — | Upgrade php7.3-cliUpgrade php7.3-fpmUpgrade php5-cgiUpgrade libapache2-mod-php7.3Upgrade php7.3-cgiUpgrade php7.2-cgiUpgrade libapache2-mod-php7.0Upgrade php5-fpmUpgrade php7.0-cgiUpgrade php7.2-fpmUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php5Upgrade php7.0-cliUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php7.2-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php5-cliUpgrade libapache2-mod-php7.2Upgrade php7.0-fpm | Feb 18, 2020 | Feb 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub