The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-toolsUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-intlUpgrade php-odbcUpgrade libzipUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-processUpgrade php-soapUpgrade php-jsonUpgrade phpUpgrade php-gdUpgrade apcu-panelUpgrade php-gmpUpgrade php-pdoUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-mysqlndUpgrade php-pearUpgrade php-ldapUpgrade php-bcmathUpgrade php-mbstringUpgrade php-dbgUpgrade php-opcacheUpgrade php-snmpUpgrade php-embeddedUpgrade php-cliUpgrade libzip-develUpgrade php-develUpgrade php-recodeUpgrade php-xmlrpc | May 4, 2022 | Apr 1, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 1, 2020 |
| Amazon_linux | — | Upgrade php73 | May 15, 2020 | Apr 1, 2020 |
| Centos_linux | — | Upgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-soap-debuginfoUpgrade php-bcmathUpgrade php-snmpUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade php-enchant-debuginfoUpgrade php-odbcUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-fpm-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-fpmUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-develUpgrade php-xmlUpgrade libzip-develUpgrade php-intlUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-pdo-debuginfoUpgrade php-pearUpgrade php-ldap-debuginfoUpgrade php-cli-debuginfoUpgrade php-cliUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade php-jsonUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-gmpUpgrade php-enchantUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-pecl-xdebugUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-opcacheUpgrade php-snmp-debuginfoUpgrade libzip-toolsUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-processUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-devel | Sep 9, 2020 | Apr 1, 2020 |
| Debian | — | Upgrade php7.4 | Jul 8, 2020 | Apr 1, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Mar 26, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.5-11.4.22.0.1.69.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.17-11.4.22.0.1.69.2 on Solaris 11.4 | Jan 19, 2021 | Apr 1, 2020 |
| Oracle_linux | — | Upgrade php-cliUpgrade php-gmpUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-snmpUpgrade php-ldapUpgrade phpUpgrade php-dbgUpgrade php-fpmUpgrade php-xmlUpgrade php-pearUpgrade php-develUpgrade php-pdoUpgrade php-recodeUpgrade libzipUpgrade php-commonUpgrade php-jsonUpgrade php-embeddedUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-soapUpgrade libzip-develUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-dbaUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-processUpgrade php-intlUpgrade php-pgsqlUpgrade php-gdUpgrade php-xmlrpc | Sep 10, 2020 | Apr 1, 2020 |
| Php | — | Upgrade to PHP version 7.4.4Upgrade to PHP version 7.3.16 | Apr 6, 2020 | Apr 1, 2020 |
| Redhat_linux | — | Upgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-cliUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-embeddedUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-xmlUpgrade php-jsonUpgrade php-odbcUpgrade php-recodeUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-develUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-ldapUpgrade php-pearUpgrade php-gmpUpgrade php-dbgUpgrade php-recode-debuginfoUpgrade php-pdoUpgrade phpUpgrade php-pecl-zipUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpmUpgrade php-bcmathUpgrade php-snmpUpgrade php-pecl-rrd-debuginfoUpgrade php-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebugUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade apcu-panelUpgrade php-processUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-mbstringUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade php-pgsql-debuginfoUpgrade php-gdUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-xml-debuginfoUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-dba | Sep 9, 2020 | Apr 1, 2020 |
| Rocky_linux | — | Upgrade libzip-toolsUpgrade php-debugsourceUpgrade php-common-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-dbgUpgrade php-ldapUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-opcacheUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-fpm-debuginfoUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbaUpgrade php-soapUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchantUpgrade php-json-debuginfoUpgrade php-pecl-apcuUpgrade php-develUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzipUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-intl-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-fpmUpgrade php-pgsqlUpgrade php-enchant-debuginfoUpgrade libzip-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-mbstringUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-odbcUpgrade php-jsonUpgrade php-mbstring-debuginfo | Mar 12, 2024 | Apr 1, 2020 |
| Ubuntu | — | Upgrade php7.3-mbstringUpgrade libapache2-mod-php7.4Upgrade php7.4-cliUpgrade php7.3-cliUpgrade php7.3-cgiUpgrade php7.4-cgiUpgrade php7.3-fpmUpgrade libapache2-mod-php7.3Upgrade php7.4-fpmUpgrade php7.4-mbstring | Apr 16, 2020 | Apr 1, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub