In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the get_headers() and possibly send some information to a wrong server.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mbstringUpgrade php-snmpUpgrade php-embeddedUpgrade phpUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-develUpgrade php-xmlUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-cliUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-pecl-zipUpgrade php-processUpgrade php-gdUpgrade php-pdoUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-dbaUpgrade php-jsonUpgrade php-odbcUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-bcmathUpgrade php-intlUpgrade php-gmpUpgrade php-soapUpgrade php-dbgUpgrade php-enchantUpgrade php-ldap | May 4, 2022 | Apr 1, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 1, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | May 15, 2020 | Apr 1, 2020 |
| Centos_linux | — | Upgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-commonUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debuginfoUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-fpm-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-debugsourceUpgrade php-dbgUpgrade libzip-toolsUpgrade php-gdUpgrade php-opcache-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade phpUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-dbaUpgrade php-intlUpgrade php-pdo-debuginfoUpgrade php-processUpgrade php-odbcUpgrade php-xml-debuginfoUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-embeddedUpgrade php-opcacheUpgrade php-soap-debuginfoUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade php-process-debuginfoUpgrade php-pearUpgrade libzip-develUpgrade php-cliUpgrade php-mysqlndUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-mysqlnd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade libzipUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-intl-debuginfoUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-bcmathUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-develUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbg-debuginfoUpgrade php-recode | Sep 9, 2020 | Apr 1, 2020 |
| Debian | — | Upgrade php7.4 | Apr 28, 2020 | Apr 1, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Mar 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade phpUpgrade php-gdUpgrade php-pdoUpgrade php-soapUpgrade php-recodeUpgrade php-ldapUpgrade php-mysqlUpgrade php-commonUpgrade php-odbcUpgrade php-cliUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-processUpgrade php-pgsql | Sep 28, 2020 | Apr 1, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-soapUpgrade php-xmlrpcUpgrade php-gdUpgrade php-recodeUpgrade php-processUpgrade php-commonUpgrade php-xmlUpgrade php-fpmUpgrade php-cliUpgrade php-ldapUpgrade php-odbcUpgrade phpUpgrade php-pdo | May 27, 2020 | Apr 1, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.5-11.4.22.0.1.69.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.17-11.4.22.0.1.69.2 on Solaris 11.4 | Jan 19, 2021 | Apr 1, 2020 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-recodeUpgrade php-soapUpgrade php-gdUpgrade libzip-toolsUpgrade php-enchantUpgrade php-processUpgrade libzip-develUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-commonUpgrade php-jsonUpgrade php-opcacheUpgrade phpUpgrade php-xmlUpgrade php-develUpgrade php-mysqlndUpgrade php-odbcUpgrade php-pearUpgrade php-cliUpgrade php-snmpUpgrade php-pdoUpgrade php-ldapUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade libzipUpgrade php-fpmUpgrade php-dbgUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-bcmath | Sep 10, 2020 | Apr 1, 2020 |
| Php | — | Upgrade to PHP version 7.2.29Upgrade to PHP version 7.4.4Upgrade to PHP version 7.3.16 | Apr 6, 2020 | Apr 1, 2020 |
| Redhat_linux | — | Upgrade php-opcache-debuginfoUpgrade php-fpmUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-rrd-debuginfoUpgrade php-cliUpgrade php-dbaUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-soap-debuginfoUpgrade php-odbc-debuginfoUpgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade php-ldap-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-recode-debuginfoUpgrade libzip-debugsourceUpgrade php-recodeUpgrade php-develUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-pearUpgrade php-dba-debuginfoUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade php-enchant-debuginfoUpgrade php-opcacheUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade apcu-panelUpgrade php-gd-debuginfoUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-xml-debuginfoUpgrade php-gmpUpgrade php-odbcNo solution existsUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php-pecl-rrd-debugsourceUpgrade php-common-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-embeddedUpgrade php-snmpUpgrade php-xmlrpc-debuginfoUpgrade php-json-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade phpUpgrade php-bcmath-debuginfoUpgrade php-commonUpgrade php-embedded-debuginfoUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-mysqlndUpgrade libzip-devel | Sep 9, 2020 | Apr 1, 2020 |
| Rocky_linux | — | Upgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-ldap-debuginfoUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbc-debuginfoUpgrade php-commonUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dbaUpgrade php-soapUpgrade libzip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dba-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-jsonUpgrade php-opcache-debuginfoUpgrade php-pdoUpgrade php-develUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade libzip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pgsqlUpgrade php-odbcUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-processUpgrade php-pecl-zipUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade php-bcmathUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-fpm-debuginfoUpgrade php-embeddedUpgrade libzip-develUpgrade php-xmlUpgrade php-recodeUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soap-debuginfoUpgrade php-intlUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-recode-debuginfoUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-debugsource | Mar 12, 2024 | Apr 1, 2020 |
| Suse | — | Upgrade php5-exifUpgrade php5-mcryptUpgrade php7-readlineUpgrade php7-calendarUpgrade php5-socketsUpgrade php72-pearUpgrade php7Upgrade php72-ftpUpgrade php72-wddxUpgrade php5-fastcgiUpgrade libtidy-develUpgrade php7-dbaUpgrade php5-xslUpgrade php5-gmpUpgrade php5-bz2Upgrade php7-shmopUpgrade php72-tidyUpgrade php5-zlibUpgrade php72-calendarUpgrade php7-opensslUpgrade php5-ldapUpgrade php72-gdUpgrade php7-sysvmsgUpgrade php72-zipUpgrade php72-exifUpgrade php5-snmpUpgrade php72-intlUpgrade php72-sysvsemUpgrade php7-ldapUpgrade php5-curlUpgrade php72Upgrade php5-sysvmsgUpgrade php5-domUpgrade php7-sqliteUpgrade php7-zlibUpgrade php5-sqliteUpgrade php7-bz2Upgrade php7-jsonUpgrade php72-sodiumUpgrade php7-fpmUpgrade php5-fpmUpgrade php7-mbstringUpgrade php5-opensslUpgrade php72-pcntlUpgrade php5-pearUpgrade tidy-docUpgrade apache2-mod_php7Upgrade php72-mbstringUpgrade php5-imapUpgrade php72-gettextUpgrade php7-bcmathUpgrade php7-pear-archive_tarUpgrade php72-pear-archive_tarUpgrade php72-sqliteUpgrade php72-zlibUpgrade php72-gmpUpgrade php5-ftpUpgrade php7-fileinfoUpgrade php7-gettextUpgrade php7-odbcUpgrade php7-tidyUpgrade php7-pharUpgrade php5-xmlrpcUpgrade php5-ctypeUpgrade php5-iconvUpgrade php72-curlUpgrade php7-xslUpgrade php72-jsonUpgrade php72-bcmathUpgrade php5-pspellUpgrade php5-mbstringUpgrade php7-develUpgrade php72-iconvUpgrade php7-xmlrpcUpgrade php7-sysvshmUpgrade php72-dbaUpgrade php72-xmlwriterUpgrade php5-shmopUpgrade php7-domUpgrade php72-mysqlUpgrade php72-fpmUpgrade php7-ctypeUpgrade php5-odbcUpgrade php5-pharUpgrade php5-pdoUpgrade php5-wddxUpgrade php72-fileinfoUpgrade php5-mysqlUpgrade php72-ldapUpgrade php72-fastcgiUpgrade php5-bcmathUpgrade php5-pgsqlUpgrade php5-opcacheUpgrade php5-gettextUpgrade php72-xmlrpcUpgrade php5-pcntlUpgrade php5-calendarUpgrade php72-develUpgrade php5-enchantUpgrade php5-intlUpgrade php72-soapUpgrade php72-domUpgrade php72-odbcUpgrade php7-opcacheUpgrade php72-pspellUpgrade php72-opcacheUpgrade php72-ctypeUpgrade php7-sysvsemUpgrade php7-snmpUpgrade php72-sysvshmUpgrade php5-sysvshmUpgrade php5-jsonUpgrade php72-readlineUpgrade php72-pgsqlUpgrade php7-soapUpgrade php7-exifUpgrade php5-zipUpgrade php5-xmlreaderUpgrade php5-tokenizerUpgrade php5-gdUpgrade php7-tokenizerUpgrade php7-pgsqlUpgrade php72-imapUpgrade php72-enchantUpgrade php7-enchantUpgrade php7-socketsUpgrade php5-soapUpgrade php7-fastcgiUpgrade php7-iconvUpgrade php7-pcntlUpgrade libtidy5Upgrade php72-sysvmsgUpgrade php7-embedUpgrade php7-pdoUpgrade php72-pdoUpgrade php7-gdUpgrade php7-testUpgrade php5-posixUpgrade php7-gmpUpgrade php7-ftpUpgrade php72-pharUpgrade php5-dbaUpgrade php72-opensslUpgrade php7-mysqlUpgrade apache2-mod_php5Upgrade php7-posixUpgrade php7-zipUpgrade tidyUpgrade php72-tokenizerUpgrade php72-socketsUpgrade php5-fileinfoUpgrade php7-pearUpgrade php7-firebirdUpgrade php7-xmlwriterUpgrade php72-snmpUpgrade apache2-mod_php72Upgrade php72-xmlreaderUpgrade php7-curlUpgrade php7-intlUpgrade php7-xmlreaderUpgrade php5-develUpgrade php72-bz2Upgrade php72-shmopUpgrade php5-suhosinUpgrade php5-sysvsemUpgrade php5-xmlwriterUpgrade php72-posixUpgrade php7-sodiumUpgrade php7-wddxUpgrade php5Upgrade php72-xsl | May 10, 2020 | Apr 1, 2020 |
| Ubuntu | — | Upgrade php7.4-cgiUpgrade php7.2-cgiUpgrade libapache2-mod-php7.0Upgrade php5-fpm (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.2-fpmUpgrade php7.4-mbstringUpgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.0-fpmUpgrade php7.3-cliUpgrade php7.4-cliUpgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-fpmUpgrade php7.2-cliUpgrade libapache2-mod-php7.2Upgrade php7.4-fpmUpgrade php5-cliUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-cgiUpgrade php7.3-cgiUpgrade php7.3-fpmUpgrade php7.3-mbstringUpgrade php7.2Upgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php7.3 | Apr 16, 2020 | Apr 1, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub