When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-ldapUpgrade php-bcmathUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-develUpgrade libzipUpgrade php-pearUpgrade phpUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-dbgUpgrade php-soapUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-recodeUpgrade php-fpmUpgrade php-jsonUpgrade php-pgsqlUpgrade php-gdUpgrade php-odbcUpgrade php-snmpUpgrade libzip-toolsUpgrade php-processUpgrade php-mbstringUpgrade php-opcacheUpgrade php-commonUpgrade php-xmlrpcUpgrade apcu-panelUpgrade php-xmlUpgrade php-intlUpgrade php-cliUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-mysqlnd | May 4, 2022 | Feb 10, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 10, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Mar 2, 2020 | Feb 10, 2020 |
| Centos_linux | — | Upgrade php-opcacheUpgrade libzip-debuginfoUpgrade libzip-develUpgrade php-snmpUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-bcmathUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-develUpgrade php-mysqlndUpgrade php-pearUpgrade php-recodeUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-cliUpgrade php-dbgUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-fpmUpgrade php-commonUpgrade php-ldapUpgrade php-xmlUpgrade libzip-tools-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-jsonUpgrade php-debugsourceUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pdoUpgrade php-processUpgrade php-dbg-debuginfoUpgrade php-dbaUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-fpm-debuginfoUpgrade php-embedded-debuginfoUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-gdUpgrade php-enchantUpgrade php-embeddedUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-intlUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade apcu-panel | Sep 9, 2020 | Feb 10, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2020 | Feb 10, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-commonUpgrade php-pdoUpgrade phpUpgrade php-ldapUpgrade php-cliUpgrade php-xmlUpgrade php-odbcUpgrade php-pgsqlUpgrade php-gdUpgrade php-mysqlUpgrade php-recodeUpgrade php-soapUpgrade php-xmlrpcUpgrade php-process | Nov 3, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-cliUpgrade php-pdoUpgrade php-mysqlUpgrade php-odbcUpgrade php-commonUpgrade phpUpgrade php-gdUpgrade php-ldapUpgrade php-soapUpgrade php-pgsqlUpgrade php-process | Sep 28, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-odbcUpgrade phpUpgrade php-ldapUpgrade php-gdUpgrade php-recodeUpgrade php-cliUpgrade php-commonUpgrade php-processUpgrade php-xmlUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soap | Jul 31, 2020 | Feb 10, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Feb 10, 2020 |
| Oracle_linux | — | Upgrade php-embeddedUpgrade php-odbcUpgrade php-snmpUpgrade php-opcacheUpgrade php-recodeUpgrade libzip-toolsUpgrade phpUpgrade php-cliUpgrade libzip-develUpgrade php-dbaUpgrade php-intlUpgrade php-mysqlndUpgrade php-ldapUpgrade apcu-panelUpgrade libzipUpgrade php-dbgUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-develUpgrade php-soapUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-processUpgrade php-gmpUpgrade php-fpmUpgrade php-bcmathUpgrade php-mbstringUpgrade php-pearUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-pgsql | Sep 10, 2020 | Jan 23, 2020 |
| Php | — | Upgrade to PHP version 7.2.27Upgrade to PHP version 7.4.2Upgrade to PHP version 7.3.14 | Feb 14, 2020 | Feb 10, 2020 |
| Redhat_linux | — | Upgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-pecl-zipUpgrade php-xml-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-debugsourceUpgrade libzip-toolsUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade apcu-panelUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-intlUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-jsonUpgrade php-embeddedUpgrade php-pecl-apcu-debuginfoUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-enchantUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-soapUpgrade php-ldap-debuginfoUpgrade phpUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pdoNo solution existsUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-pearUpgrade php-snmpUpgrade php-mbstringUpgrade php-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-recode-debuginfoUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-recodeUpgrade php-common-debuginfoUpgrade libzip-develUpgrade php-xmlUpgrade php-opcacheUpgrade php-pecl-zip-debugsourceUpgrade php-dbgUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-cliUpgrade php-ldapUpgrade php-mbstring-debuginfo | Sep 9, 2020 | Feb 10, 2020 |
| Rocky_linux | — | Upgrade php-enchantUpgrade php-recodeUpgrade php-dbaUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-pecl-zip-debugsourceUpgrade php-processUpgrade php-debuginfoUpgrade php-dbg-debuginfoUpgrade php-fpmUpgrade php-mysqlndUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebugUpgrade php-snmp-debuginfoUpgrade php-xmlUpgrade php-opcacheUpgrade php-snmpUpgrade libzip-debugsourceUpgrade php-embedded-debuginfoUpgrade php-pecl-zipUpgrade php-recode-debuginfoUpgrade php-develUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-opcache-debuginfoUpgrade php-gdUpgrade php-cliUpgrade php-pecl-rrd-debugsourceUpgrade php-mbstringUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpcUpgrade php-soapUpgrade php-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-pgsql-debuginfoUpgrade phpUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-pdoUpgrade php-commonUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade php-intlUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade libzipUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dba-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-json-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-cli-debuginfo | Mar 12, 2024 | Feb 10, 2020 |
| Suse | — | Upgrade php72-mysqlUpgrade php7-dbaUpgrade php72-mbstringUpgrade php5-xmlreaderUpgrade php7Upgrade php72-pgsqlUpgrade php72-tidyUpgrade php5-jsonUpgrade php72-zlibUpgrade php5-calendarUpgrade php7-pdoUpgrade php72-sqliteUpgrade php5-snmpUpgrade php72-exifUpgrade php5-mysqlUpgrade php5-sqliteUpgrade php7-fpmUpgrade php7-sysvshmUpgrade php72-snmpUpgrade php72-pcntlUpgrade php7-domUpgrade php7-xmlrpcUpgrade php7-sodiumUpgrade php7-soapUpgrade php7-tidyUpgrade php72-xmlrpcUpgrade php72-bcmathUpgrade php72-sodiumUpgrade php5-sysvmsgUpgrade php7-embedUpgrade php7-exifUpgrade php5-socketsUpgrade php7-shmopUpgrade php7-sqliteUpgrade php5-bz2Upgrade php72-wddxUpgrade php72-gettextUpgrade php5-shmopUpgrade php7-ldapUpgrade php5-xmlwriterUpgrade php5-iconvUpgrade php5-soapUpgrade php5-opensslUpgrade php7-pear-archive_tarUpgrade php7-bz2Upgrade php7-gettextUpgrade php7-jsonUpgrade php5Upgrade php7-opcacheUpgrade php72-ctypeUpgrade php72-posixUpgrade php72-ftpUpgrade php72-sysvsemUpgrade php5-mcryptUpgrade php5-odbcUpgrade php5-gmpUpgrade php7-gdUpgrade php5-sysvsemUpgrade php7-gmpUpgrade php7-firebirdUpgrade php5-pdoUpgrade php72-fileinfoUpgrade php5-mbstringUpgrade php72-pear-archive_tarUpgrade php72-gdUpgrade php72Upgrade php7-posixUpgrade php7-socketsUpgrade php5-domUpgrade php5-fastcgiUpgrade php72-sysvshmUpgrade php72-fpmUpgrade php5-pharUpgrade php7-xslUpgrade php7-xmlreaderUpgrade php72-curlUpgrade php72-iconvUpgrade php72-ldapUpgrade php5-xmlrpcUpgrade php72-jsonUpgrade php5-xslUpgrade php5-gettextUpgrade php72-tokenizerUpgrade php72-pdoUpgrade php5-pspellUpgrade php5-dbaUpgrade php7-wddxUpgrade php5-ctypeUpgrade php5-fpmUpgrade php5-gdUpgrade php7-curlUpgrade php7-zipUpgrade php72-pspellUpgrade php7-ftpUpgrade php5-bcmathUpgrade php72-shmopUpgrade php72-opensslUpgrade php7-testUpgrade php7-odbcUpgrade php5-pcntlUpgrade php72-domUpgrade php5-tokenizerUpgrade php7-ctypeUpgrade php5-fileinfoUpgrade php72-gmpUpgrade php5-imapUpgrade php5-intlUpgrade php72-xmlreaderUpgrade php72-bz2Upgrade apache2-mod_php72Upgrade apache2-mod_php7Upgrade php7-tokenizerUpgrade php7-zlibUpgrade php7-sysvsemUpgrade php5-wddxUpgrade php5-ldapUpgrade php5-opcacheUpgrade apache2-mod_php5Upgrade php7-opensslUpgrade php5-develUpgrade php72-opcacheUpgrade php5-pgsqlUpgrade php7-mbstringUpgrade php7-pharUpgrade php72-pharUpgrade php72-calendarUpgrade php72-dbaUpgrade php7-snmpUpgrade php7-mysqlUpgrade php72-soapUpgrade php5-posixUpgrade php72-enchantUpgrade php5-zlibUpgrade php72-intlUpgrade php72-odbcUpgrade php72-fastcgiUpgrade php7-fileinfoUpgrade php5-suhosinUpgrade php5-zipUpgrade php5-enchantUpgrade php5-sysvshmUpgrade php7-calendarUpgrade php7-pcntlUpgrade php7-iconvUpgrade php72-imapUpgrade php7-develUpgrade php7-bcmathUpgrade php72-develUpgrade php7-intlUpgrade php72-xslUpgrade php72-pearUpgrade php7-fastcgiUpgrade php72-readlineUpgrade php72-socketsUpgrade php72-sysvmsgUpgrade php7-pgsqlUpgrade php7-xmlwriterUpgrade php7-sysvmsgUpgrade php7-enchantUpgrade php72-zip | Feb 19, 2020 | Feb 10, 2020 |
| Ubuntu | — | Upgrade php7.2-cgiUpgrade php7.3-cliUpgrade php7.3-fpmUpgrade php5-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php7.3Upgrade php5-cliUpgrade php7.3-cgiUpgrade libapache2-mod-php7.2Upgrade php5-cli (Ubuntu Pro)Upgrade php5-fpmUpgrade libapache2-mod-php5Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-cgiUpgrade php7.0-cliUpgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php7.2-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.2-fpm | Feb 18, 2020 | Feb 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub