In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-ldapUpgrade php-odbcUpgrade php-commonUpgrade php-dbgUpgrade php-develUpgrade php-pearUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-fpmUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-bcmathUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade phpUpgrade php-pdoUpgrade libzipUpgrade php-enchantUpgrade apcu-panelUpgrade php-cliUpgrade php-snmpUpgrade php-mysqlndUpgrade php-pgsqlUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-soapUpgrade libzip-toolsUpgrade php-ffiUpgrade php-processUpgrade php-dbaUpgrade php-intlUpgrade php-mbstringUpgrade php-gdUpgrade php-xmlrpcUpgrade libzip-devel | May 13, 2022 | Oct 25, 2021 |
| Alpine Linux | — | Upgrade php81Upgrade php8Upgrade php7 | Aug 22, 2024 | Oct 25, 2021 |
| Centos_linux | — | Upgrade php-jsonUpgrade php-pgsqlUpgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-debuginfoUpgrade php-processUpgrade phpUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-json-debuginfoUpgrade php-gmpUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-soapUpgrade php-pecl-xdebug-debugsourceUpgrade php-ffi-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ffiUpgrade php-pecl-zipUpgrade php-soap-debuginfoUpgrade php-commonUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-odbc-debuginfoUpgrade apcu-panelUpgrade php-gd-debuginfoUpgrade php-opcacheUpgrade php-opcache-debuginfoUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdoUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-enchantUpgrade php-pecl-rrd-debugsourceUpgrade php-dbg-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-fpmUpgrade php-snmpUpgrade php-pearUpgrade php-cliUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-develUpgrade php-debugsourceUpgrade php-embedded-debuginfoUpgrade php-xml | May 13, 2022 | Oct 25, 2021 |
| Debian | — | Upgrade php7.4 | Nov 29, 2021 | Oct 25, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Sep 30, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlrpcUpgrade php-xmlUpgrade php-pdoUpgrade php-soapUpgrade php-fpmUpgrade php-gdUpgrade php-commonUpgrade php-processUpgrade php-ldapUpgrade php-cliUpgrade phpUpgrade php-recodeUpgrade php-odbc | Dec 28, 2021 | Oct 25, 2021 |
| Oracle Solaris | — | Upgrade web/php-80 to version 8.0.12-11.4.40.0.1.107.1 on Solaris 11.4Upgrade web/php-73 to version 7.3.32-11.4.40.0.1.107.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.25-11.4.40.0.1.107.1 on Solaris 11.4 | Dec 13, 2021 | Oct 25, 2021 |
| Oracle_linux | — | Upgrade php-enchantUpgrade php-pgsqlUpgrade php-pdoUpgrade php-dbaUpgrade php-embeddedUpgrade php-fpmUpgrade php-soapUpgrade php-gmpUpgrade php-jsonUpgrade php-develUpgrade php-dbgUpgrade php-pearUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-bcmathUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-processUpgrade php-odbcUpgrade php-mbstringUpgrade php-ffiUpgrade apcu-panelUpgrade php-xmlUpgrade libzip-develUpgrade libzip-toolsUpgrade phpUpgrade php-mysqlndUpgrade php-commonUpgrade php-opcacheUpgrade php-snmp | May 18, 2022 | Oct 20, 2021 |
| Php | — | Upgrade to PHP version 7.4.24Upgrade to PHP version 8.0.11Upgrade to PHP version 7.3.31 | Nov 30, 2021 | Oct 25, 2021 |
| Redhat_linux | — | Upgrade php-pecl-rrdUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-soap-debuginfoUpgrade php-intl-debuginfoNo solution existsUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-json-debuginfoUpgrade php-commonUpgrade php-odbcUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-debuginfoUpgrade php-pdo-debuginfoUpgrade php-processUpgrade php-xmlUpgrade php-xmlrpc-debuginfoUpgrade libzip-develUpgrade php-embedded-debuginfoUpgrade php-bcmathUpgrade phpUpgrade apcu-panelUpgrade php-ldapUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-snmpUpgrade php-ffi-debuginfoUpgrade php-ffiUpgrade php-soapUpgrade php-fpm-debuginfoUpgrade libzip-debugsourceUpgrade php-intlUpgrade php-cliUpgrade php-pecl-zipUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-gmpUpgrade php-dbaUpgrade php-pecl-apcu-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gdUpgrade php-pdoUpgrade php-pgsql-debuginfoUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzipUpgrade php-enchant-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-json | May 13, 2022 | Oct 25, 2021 |
| Rocky_linux | — | Upgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-mbstringUpgrade php-opcache-debuginfoUpgrade php-snmpUpgrade php-develUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlUpgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-cliUpgrade php-jsonUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-odbcUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-fpm-debuginfoUpgrade libzipUpgrade php-pecl-zip-debuginfoUpgrade php-ffi-debuginfoUpgrade phpUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-opcacheUpgrade php-pdo-debuginfoUpgrade php-soapUpgrade php-ffiUpgrade php-intlUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade php-ldapUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-toolsUpgrade php-enchant-debuginfoUpgrade php-pecl-zipUpgrade php-soap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-embeddedUpgrade php-bcmathUpgrade php-cli-debuginfoUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pdo | Mar 5, 2024 | Oct 25, 2021 |
| Suse | — | Upgrade php8-readlineUpgrade php7-firebirdUpgrade php7-zlibUpgrade php7-enchantUpgrade php7-ctypeUpgrade php7-sodiumUpgrade php72-ftpUpgrade php7-sysvshmUpgrade php8-ldapUpgrade php8-intlUpgrade php72-mbstringUpgrade php7-zipUpgrade php7-testUpgrade php8-enchantUpgrade php8-pdoUpgrade php74-mbstringUpgrade php72-domUpgrade php8-testUpgrade php8-gdUpgrade php72-pearUpgrade php74-odbcUpgrade php74-snmpUpgrade php74-sysvshmUpgrade php8-calendarUpgrade php74-gdUpgrade php74-pdoUpgrade php74-socketsUpgrade php8-gettextUpgrade php72-iconvUpgrade php72-gettextUpgrade php74-enchantUpgrade php72-ldapUpgrade php8-bz2Upgrade php74-develUpgrade php74-curlUpgrade php74Upgrade php74-intlUpgrade php7-xmlwriterUpgrade php8-sysvmsgUpgrade php74-pcntlUpgrade php72-pcntlUpgrade php8-sysvshmUpgrade php8-develUpgrade php8-bcmathUpgrade apache2-mod_php72Upgrade php8-opcacheUpgrade php8-ctypeUpgrade php72-xslUpgrade php8-shmopUpgrade php74-sodiumUpgrade php8-cliUpgrade php8-sodiumUpgrade php7-fileinfoUpgrade php72-soapUpgrade php8-domUpgrade php72-develUpgrade php7-shmopUpgrade php72-dbaUpgrade php74-soapUpgrade php72-imapUpgrade php72-posixUpgrade apache2-mod_php74Upgrade php7-pearUpgrade php72-opensslUpgrade php8-zipUpgrade php74-iconvUpgrade php7-pear-archive_tarUpgrade php72-opcacheUpgrade php72-gdUpgrade php8-embedUpgrade php72-wddxUpgrade php7-mysqlUpgrade php72-pear-archive_tarUpgrade php7-sysvsemUpgrade php72-tidyUpgrade php72-enchantUpgrade php74-bcmathUpgrade php7-fastcgiUpgrade php74-sqliteUpgrade php72-calendarUpgrade php7-calendarUpgrade php8-socketsUpgrade php7-opcacheUpgrade php74-tidyUpgrade php72-pharUpgrade php7-ldapUpgrade php72-ctypeUpgrade php72-gmpUpgrade php72-intlUpgrade php7-dbaUpgrade php7-develUpgrade php74-fileinfoUpgrade php7-odbcUpgrade php8-exifUpgrade php72-tokenizerUpgrade php72-jsonUpgrade php8-soapUpgrade php74-zipUpgrade php74-pgsqlUpgrade php74-xslUpgrade php8-curlUpgrade php74-sysvsemUpgrade php7-bz2Upgrade php72-sysvshmUpgrade php8-opensslUpgrade php72-socketsUpgrade php74-shmopUpgrade php8-xmlreaderUpgrade php7-xmlreaderUpgrade php72-exifUpgrade php74-xmlwriterUpgrade php74-opensslUpgrade php7-cliUpgrade php8-sqliteUpgrade php8-mbstringUpgrade php74-exifUpgrade php7-opensslUpgrade php72-xmlreaderUpgrade php7-ftpUpgrade php72-bcmathUpgrade php72-fpmUpgrade php7-tidyUpgrade php7-embedUpgrade apache2-mod_php8Upgrade php7-tokenizerUpgrade php7Upgrade php7-snmpUpgrade php7-posixUpgrade php72-pspellUpgrade php72-sodiumUpgrade php72-xmlwriterUpgrade php72-odbcUpgrade php7-xmlrpcUpgrade php7-pdoUpgrade php8-zlibUpgrade php7-gmpUpgrade php7-soapUpgrade php8Upgrade php74-zlibUpgrade php74-ctypeUpgrade php7-domUpgrade php7-intlUpgrade php74-calendarUpgrade php74-fpmUpgrade php72-fileinfoUpgrade php72-snmpUpgrade php8-pharUpgrade php8-ftpUpgrade php72-readlineUpgrade php74-domUpgrade php74-xmlreaderUpgrade php8-tidyUpgrade php72-shmopUpgrade php72-curlUpgrade php7-bcmathUpgrade php8-gmpUpgrade php74-xmlrpcUpgrade php7-exifUpgrade php7-curlUpgrade php8-xmlwriterUpgrade php8-fpmUpgrade php8-posixUpgrade php8-fileinfoUpgrade php74-fastcgiUpgrade php72-pdoUpgrade php72-fastcgiUpgrade php7-xslUpgrade php7-wddxUpgrade php7-gdUpgrade php7-fpmUpgrade php8-xslUpgrade php7-iconvUpgrade php7-sysvmsgUpgrade php72-pgsqlUpgrade php72-sqliteUpgrade php7-jsonUpgrade php72-sysvsemUpgrade php74-readlineUpgrade php74-pharUpgrade php74-tokenizerUpgrade apache2-mod_php7Upgrade php8-pcntlUpgrade php74-jsonUpgrade php8-snmpUpgrade php8-odbcUpgrade php74-mysqlUpgrade php8-dbaUpgrade php8-pgsqlUpgrade php7-gettextUpgrade php7-socketsUpgrade php74-bz2Upgrade php7-pcntlUpgrade php7-mbstringUpgrade php8-mysqlUpgrade php72-bz2Upgrade php72-xmlrpcUpgrade php8-iconvUpgrade php72-zipUpgrade php72Upgrade php7-pgsqlUpgrade php74-posixUpgrade php7-pharUpgrade php7-sqliteUpgrade php8-tokenizerUpgrade php74-gettextUpgrade php7-readlineUpgrade php74-opcacheUpgrade php72-mysqlUpgrade php74-dbaUpgrade php8-fastcgiUpgrade php74-gmpUpgrade php74-ldapUpgrade php72-zlibUpgrade php74-ftpUpgrade php74-sysvmsgUpgrade php72-sysvmsgUpgrade php8-sysvsem | Nov 19, 2021 | Oct 25, 2021 |
| Ubuntu | — | Upgrade php8.0-fpmUpgrade php7.4-fpmUpgrade php7.2-fpmUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.0-fpm (Ubuntu Pro) | Oct 28, 2021 | Oct 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub