When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-xmlUpgrade apcu-panelUpgrade php-snmpUpgrade php-processUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade libzip-toolsUpgrade libzip-develUpgrade php-mysqlndUpgrade php-intlUpgrade php-cliUpgrade php-opcacheUpgrade php-commonUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-ldapUpgrade php-pdoUpgrade phpUpgrade php-pearUpgrade php-dbaUpgrade php-gdUpgrade php-pgsqlUpgrade php-recodeUpgrade php-soapUpgrade php-enchantUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-dbgUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-devel | May 4, 2022 | Feb 10, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 10, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Mar 2, 2020 | Feb 10, 2020 |
| Centos_linux | — | Upgrade php-xmlrpc-debuginfoUpgrade php-odbc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-soapUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade libzip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pgsql-debuginfoUpgrade php-xmlrpcUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-gdUpgrade php-processUpgrade php-pdoUpgrade php-embeddedUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-debugsourceUpgrade php-pdo-debuginfoUpgrade php-gmpUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade php-gd-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfoUpgrade phpUpgrade php-dbaUpgrade php-mbstringUpgrade php-opcache-debuginfoUpgrade php-enchantUpgrade php-fpm-debuginfoUpgrade php-process-debuginfoUpgrade php-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-json-debuginfoUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-commonUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-snmpUpgrade php-fpmUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade libzip-develUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-cliUpgrade php-recodeUpgrade php-xmlUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-soap-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfo | Sep 9, 2020 | Feb 10, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2020 | Feb 10, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-odbcUpgrade php-cliUpgrade php-commonUpgrade php-xmlUpgrade php-pgsqlUpgrade php-pdoUpgrade phpUpgrade php-ldapUpgrade php-soapUpgrade php-gdUpgrade php-processUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-mysql | Nov 3, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-processUpgrade phpUpgrade php-soapUpgrade php-odbcUpgrade php-pgsqlUpgrade php-ldapUpgrade php-gdUpgrade php-commonUpgrade php-mysqlUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-recodeUpgrade php-cli | Sep 28, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade phpUpgrade php-ldapUpgrade php-gdUpgrade php-cliUpgrade php-recodeUpgrade php-odbcUpgrade php-pdoUpgrade php-commonUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-fpmUpgrade php-processUpgrade php-soap | Jul 31, 2020 | Feb 10, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Feb 10, 2020 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade php-snmpUpgrade php-cliUpgrade phpUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-intlUpgrade php-embeddedUpgrade php-odbcUpgrade php-recodeUpgrade libzipUpgrade php-dbgUpgrade php-enchantUpgrade libzip-develUpgrade php-dbaUpgrade php-ldapUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-pearUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-soapUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-bcmathUpgrade php-processUpgrade php-gmpUpgrade php-fpmUpgrade php-xmlUpgrade php-mbstring | Sep 10, 2020 | Jan 23, 2020 |
| Php | — | Upgrade to PHP version 7.4.2Upgrade to PHP version 7.3.14Upgrade to PHP version 7.2.27 | Feb 14, 2020 | Feb 10, 2020 |
| Redhat_linux | — | Upgrade php-xmlrpc-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade php-enchantUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade phpUpgrade php-pecl-zipUpgrade php-gmpUpgrade libzipUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-pecl-rrdUpgrade php-soap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-snmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-soapUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-dbaUpgrade php-embedded-debuginfoUpgrade php-debuginfoUpgrade libzip-debuginfoUpgrade php-jsonUpgrade php-gmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-dba-debuginfoUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade apcu-panelUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-opcache-debuginfoUpgrade php-json-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-cliUpgrade php-bcmathUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstringUpgrade php-snmpUpgrade php-pearUpgrade php-pecl-rrd-debuginfoUpgrade php-dbgUpgrade php-opcacheUpgrade php-recodeUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade libzip-develUpgrade php-pdoUpgrade php-xmlUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpmUpgrade php-recode-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-develNo solution exists | Sep 9, 2020 | Feb 10, 2020 |
| Rocky_linux | — | Upgrade php-common-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-odbc-debuginfoUpgrade php-json-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade libzipUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-gmpUpgrade php-pgsql-debuginfoUpgrade php-cli-debuginfoUpgrade php-dbgUpgrade php-commonUpgrade php-jsonUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-gmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade phpUpgrade php-gd-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade php-fpmUpgrade php-pecl-rrd-debugsourceUpgrade php-snmpUpgrade php-opcacheUpgrade php-xmlUpgrade php-gdUpgrade php-mbstringUpgrade php-embeddedUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-processUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-recodeUpgrade php-enchantUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebugUpgrade php-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-develUpgrade libzip-toolsUpgrade php-cli | Mar 12, 2024 | Feb 10, 2020 |
| Suse | — | Upgrade php7-pgsqlUpgrade php5-develUpgrade php7-tokenizerUpgrade php72-develUpgrade apache2-mod_php5Upgrade php5-wddxUpgrade php5-xslUpgrade php7-intlUpgrade apache2-mod_php7Upgrade apache2-mod_php72Upgrade php5-ldapUpgrade php72-opcacheUpgrade php5-opcacheUpgrade php7-mbstringUpgrade php72-xmlreaderUpgrade php7-develUpgrade php7-iconvUpgrade php72-bz2Upgrade php5-gdUpgrade php5-sysvshmUpgrade php7-calendarUpgrade php7-wddxUpgrade php7-zlibUpgrade php7-snmpUpgrade php72-intlUpgrade php72-shmopUpgrade php5-bcmathUpgrade php72-ldapUpgrade php7-odbcUpgrade php5-suhosinUpgrade php5-imapUpgrade php72-imapUpgrade php7-zipUpgrade php72-pspellUpgrade php5-fpmUpgrade php5-xmlrpcUpgrade php5-pspellUpgrade php72-iconvUpgrade php5-dbaUpgrade php72-jsonUpgrade php5-tokenizerUpgrade php7-curlUpgrade php7-opensslUpgrade php72-pdoUpgrade php7-enchantUpgrade php72-readlineUpgrade php72-soapUpgrade php72-fastcgiUpgrade php7-testUpgrade php7-ftpUpgrade php5-zlibUpgrade php5-ctypeUpgrade php72-socketsUpgrade php72-zipUpgrade php7-fileinfoUpgrade php72-xslUpgrade php72-pearUpgrade php5-gettextUpgrade php7-mysqlUpgrade php5-pgsqlUpgrade php72-odbcUpgrade php72-calendarUpgrade php72-opensslUpgrade php72-sysvmsgUpgrade php7-fastcgiUpgrade php5-fileinfoUpgrade php72-domUpgrade php7-xmlwriterUpgrade php72-enchantUpgrade php7-sysvmsgUpgrade php7-pcntlUpgrade php7-ctypeUpgrade php5-pcntlUpgrade php5-zipUpgrade php72-gmpUpgrade php7-bcmathUpgrade php72-tokenizerUpgrade php5-soapUpgrade php7-gettextUpgrade php5-ftpUpgrade php5-exifUpgrade php7-opcacheUpgrade php5-xmlwriterUpgrade php7-xmlreaderUpgrade php7-bz2Upgrade php5Upgrade php5-shmopUpgrade php5-iconvUpgrade php5-opensslUpgrade php5-xmlreaderUpgrade php5-gmpUpgrade php5-sysvmsgUpgrade php7-sysvshmUpgrade php72-sqliteUpgrade php72-xmlwriterUpgrade php72-pgsqlUpgrade php72-exifUpgrade php72-mysqlUpgrade php72Upgrade php72-snmpUpgrade php72-tidyUpgrade php7-dbaUpgrade php5-pearUpgrade php5-jsonUpgrade php7-fpmUpgrade php72-sysvsemUpgrade php7-soapUpgrade php7-tidyUpgrade php5-sqliteUpgrade php5-odbcUpgrade php7-pear-archive_tarUpgrade php7-readlineUpgrade php5-mcryptUpgrade php5-mbstringUpgrade php5-sysvsemUpgrade php7Upgrade php7-gmpUpgrade php7-posixUpgrade php7-socketsUpgrade php5-snmpUpgrade php72-pear-archive_tarUpgrade php72-ctypeUpgrade php7-firebirdUpgrade php5-pharUpgrade php5-bz2Upgrade php5-domUpgrade php5-pdoUpgrade php5-calendarUpgrade php72-fileinfoUpgrade php72-curlUpgrade php7-sodiumUpgrade php7-domUpgrade php72-zlibUpgrade php7-xmlrpcUpgrade php72-fpmUpgrade php72-sodiumUpgrade php7-pdoUpgrade php72-sysvshmUpgrade php72-mbstringUpgrade php72-pcntlUpgrade php7-xslUpgrade php7-gdUpgrade php72-xmlrpcUpgrade php7-pearUpgrade php5-mysqlUpgrade php5-fastcgiUpgrade php7-ldapUpgrade php72-ftpUpgrade php7-sqliteUpgrade php72-posixUpgrade php5-socketsUpgrade php72-gettextUpgrade php72-bcmathUpgrade php72-wddxUpgrade php7-exifUpgrade php7-shmopUpgrade php7-embedUpgrade php7-jsonUpgrade php5-curlUpgrade php72-gd | Feb 19, 2020 | Feb 10, 2020 |
| Ubuntu | — | Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php7.3Upgrade php5-cliUpgrade php7.3-fpmUpgrade php7.3-cgiUpgrade php5-cgiUpgrade php7.3-cliUpgrade php5-cli (Ubuntu Pro)Upgrade php7.2-cgiUpgrade libapache2-mod-php7.2Upgrade php5-fpmUpgrade libapache2-mod-php5Upgrade php7.0-cgiUpgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.2-fpmUpgrade php7.2-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php7.0-cli | Feb 18, 2020 | Feb 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub