In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pgsqlUpgrade php-dbaUpgrade libzip-develUpgrade apcu-panelUpgrade php-ffiUpgrade php-cliUpgrade php-mysqlndUpgrade php-gdUpgrade php-mbstringUpgrade php-opcacheUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-processUpgrade php-xmlrpcUpgrade php-intlUpgrade php-snmpUpgrade libzip-toolsUpgrade libzipUpgrade php-odbcUpgrade php-commonUpgrade php-ldapUpgrade php-gmpUpgrade php-jsonUpgrade php-pdoUpgrade php-pearUpgrade php-dbgUpgrade phpUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-enchantUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-fpm | May 13, 2022 | Oct 25, 2021 |
| Alpine Linux | — | Upgrade php7Upgrade php8Upgrade php81 | Aug 22, 2024 | Oct 25, 2021 |
| Centos_linux | — | Upgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade php-json-debuginfoUpgrade php-jsonUpgrade libzip-debuginfoUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-ldap-debuginfoUpgrade php-gmpUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade apcu-panelUpgrade php-soap-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ffiUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-dbaUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-soapUpgrade php-pdo-debuginfoUpgrade php-ffi-debuginfoUpgrade php-cli-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-gmp-debuginfoUpgrade php-dba-debuginfoUpgrade libzipUpgrade libzip-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-debuginfoUpgrade phpUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-enchantUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-mbstringUpgrade php-embeddedUpgrade php-fpmUpgrade php-snmpUpgrade php-pearUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-debugsourceUpgrade php-pecl-xdebugUpgrade php-opcacheUpgrade php-opcache-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcu-debuginfoUpgrade libzip-develUpgrade php-pdoUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfo | May 13, 2022 | Oct 25, 2021 |
| Debian | — | Upgrade php7.4 | Nov 29, 2021 | Oct 25, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Sep 30, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade php-odbcUpgrade php-cliUpgrade php-recodeUpgrade php-processUpgrade php-commonUpgrade phpUpgrade php-gdUpgrade php-pdoUpgrade php-soapUpgrade php-xmlUpgrade php-fpmUpgrade php-xmlrpc | Dec 28, 2021 | Oct 25, 2021 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.32-11.4.40.0.1.107.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.25-11.4.40.0.1.107.1 on Solaris 11.4Upgrade web/php-80 to version 8.0.12-11.4.40.0.1.107.1 on Solaris 11.4 | Dec 13, 2021 | Oct 25, 2021 |
| Oracle_linux | — | Upgrade php-gmpUpgrade php-jsonUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-pgsqlUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-dbgUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-develUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-soapUpgrade php-fpmUpgrade libzipUpgrade php-embeddedUpgrade phpUpgrade php-processUpgrade apcu-panelUpgrade libzip-toolsUpgrade php-intlUpgrade php-mbstringUpgrade php-ffiUpgrade php-pecl-rrdUpgrade php-commonUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-snmpUpgrade php-cliUpgrade php-odbcUpgrade php-xmlUpgrade libzip-devel | May 18, 2022 | Oct 20, 2021 |
| Php | — | Upgrade to PHP version 7.4.24Upgrade to PHP version 8.0.11Upgrade to PHP version 7.3.31 | Nov 30, 2021 | Oct 25, 2021 |
| Redhat_linux | — | Upgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-pearUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade php-mbstring-debuginfoUpgrade php-commonUpgrade php-fpmUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoNo solution existsUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-develUpgrade php-common-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-apcuUpgrade php-soapUpgrade apcu-panelUpgrade php-processUpgrade php-pgsql-debuginfoUpgrade php-bcmathUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-ldapUpgrade php-pdoUpgrade php-opcacheUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-snmpUpgrade php-mysqlndUpgrade php-ffiUpgrade php-pecl-xdebug-debuginfoUpgrade php-embeddedUpgrade php-fpm-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xmlUpgrade libzip-develUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-intlUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-debugsourceUpgrade php-dbaUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-debuginfoUpgrade libzipUpgrade libzip-debugsourceUpgrade php-bcmath-debuginfoUpgrade php | May 13, 2022 | Oct 25, 2021 |
| Rocky_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-embeddedUpgrade php-ffiUpgrade php-ldapUpgrade libzip-develUpgrade php-xmlrpc-debuginfoUpgrade libzip-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-commonUpgrade php-pecl-apcu-develUpgrade php-dba-debuginfoUpgrade php-debugsourceUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-embedded-debuginfoUpgrade php-opcacheUpgrade php-ffi-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-bcmathUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade phpUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade php-soapUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-dbaUpgrade php-mbstringUpgrade php-enchantUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcu-debuginfoUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-pecl-rrd | Mar 5, 2024 | Oct 25, 2021 |
| Suse | — | Upgrade php74-bz2Upgrade php7-xmlreaderUpgrade php7-socketsUpgrade php74-readlineUpgrade php74-tokenizerUpgrade php8-dbaUpgrade php8-snmpUpgrade php72-fpmUpgrade php74-calendarUpgrade php74-domUpgrade apache2-mod_php7Upgrade php7-curlUpgrade php74-jsonUpgrade php7-gettextUpgrade php8-mysqlUpgrade php72-bz2Upgrade php72-curlUpgrade php72-readlineUpgrade php7-bcmathUpgrade php7-embedUpgrade php74-xmlrpcUpgrade php7-bz2Upgrade php8-gmpUpgrade php72-shmopUpgrade php8-xslUpgrade php7-xslUpgrade php72-fastcgiUpgrade php74-sysvmsgUpgrade php7Upgrade php7-exifUpgrade php8-tidyUpgrade php72-pgsqlUpgrade php7-snmpUpgrade php72-fileinfoUpgrade php7-xmlrpcUpgrade php8-opensslUpgrade php7-ftpUpgrade php74-shmopUpgrade php72-xmlwriterUpgrade php74-ctypeUpgrade php72-sodiumUpgrade php74-zipUpgrade php8-sysvsemUpgrade php7-soapUpgrade php74-fastcgiUpgrade php72-sysvshmUpgrade php8-sqliteUpgrade php8-zlibUpgrade php74-zlibUpgrade php72-zlibUpgrade php8-ftpUpgrade php74-xmlreaderUpgrade php74-posixUpgrade php7-gmpUpgrade php8-xmlreaderUpgrade php74-xslUpgrade php8-pgsqlUpgrade php72-exifUpgrade php7-mbstringUpgrade php74-sysvsemUpgrade php72-bcmathUpgrade php7-pdoUpgrade php72-odbcUpgrade php74-ldapUpgrade php7-pcntlUpgrade php8-odbcUpgrade php7-sqliteUpgrade php8-pcntlUpgrade php8-fastcgiUpgrade php74-pharUpgrade php72-pspellUpgrade php7-tokenizerUpgrade php72-pdoUpgrade php74-exifUpgrade php8-fileinfoUpgrade php7-pgsqlUpgrade php8-pharUpgrade php72-zipUpgrade php74-dbaUpgrade php74-fpmUpgrade php8Upgrade php7-domUpgrade php72Upgrade php7-intlUpgrade php72-socketsUpgrade php74-xmlwriterUpgrade php74-gmpUpgrade php72-mysqlUpgrade php72-xmlreaderUpgrade php74-pgsqlUpgrade php8-curlUpgrade php74-opensslUpgrade php8-mbstringUpgrade php74-opcacheUpgrade php8-tokenizerUpgrade php72-xmlrpcUpgrade php74-mysqlUpgrade php7-readlineUpgrade php7-tidyUpgrade php7-gdUpgrade php72-sysvmsgUpgrade php8-fpmUpgrade php72-sqliteUpgrade php7-sysvmsgUpgrade php7-cliUpgrade apache2-mod_php8Upgrade php74-ftpUpgrade php7-jsonUpgrade php8-xmlwriterUpgrade php7-iconvUpgrade php7-posixUpgrade php7-wddxUpgrade php7-opensslUpgrade php8-posixUpgrade php7-fpmUpgrade php72-sysvsemUpgrade php72-snmpUpgrade php8-iconvUpgrade php7-pharUpgrade php74-gettextUpgrade php8-testUpgrade php7-sysvsemUpgrade php8-shmopUpgrade php7-xmlwriterUpgrade php74-curlUpgrade php74-odbcUpgrade php72-enchantUpgrade php72-tokenizerUpgrade php8-gettextUpgrade php8-domUpgrade php72-domUpgrade php7-zlibUpgrade php72-mbstringUpgrade php72-opcacheUpgrade php72-opensslUpgrade php7-pear-archive_tarUpgrade apache2-mod_php74Upgrade php8-sysvshmUpgrade php8-develUpgrade php7-pearUpgrade php74-tidyUpgrade php72-dbaUpgrade php74-sodiumUpgrade php8-cliUpgrade php72-posixUpgrade php8-ctypeUpgrade php8-sodiumUpgrade php74-soapUpgrade php8-opcacheUpgrade php8-zipUpgrade php72-pharUpgrade php72-pearUpgrade php74-sqliteUpgrade php7-ldapUpgrade php8-enchantUpgrade php7-fastcgiUpgrade php72-iconvUpgrade php72-calendarUpgrade php74-sysvshmUpgrade php74-develUpgrade php8-soapUpgrade php72-pcntlUpgrade php72-jsonUpgrade php72-intlUpgrade php72-gmpUpgrade php7-firebirdUpgrade php8-exifUpgrade php72-imapUpgrade php8-ldapUpgrade php7-zipUpgrade php72-ftpUpgrade php74-pdoUpgrade php72-ctypeUpgrade php7-calendarUpgrade php7-sysvshmUpgrade php74-fileinfoUpgrade php7-dbaUpgrade php72-gettextUpgrade php72-gdUpgrade php7-testUpgrade php72-ldapUpgrade php74-socketsUpgrade php74-bcmathUpgrade php7-shmopUpgrade php7-odbcUpgrade php74-gdUpgrade php8-readlineUpgrade php8-intlUpgrade php7-ctypeUpgrade php72-pear-archive_tarUpgrade php8-gdUpgrade php8-bz2Upgrade php74-pcntlUpgrade php7-opcacheUpgrade php74-enchantUpgrade php8-calendarUpgrade php7-fileinfoUpgrade php72-develUpgrade php7-develUpgrade php74-mbstringUpgrade php8-pdoUpgrade php8-sysvmsgUpgrade php74-snmpUpgrade php8-socketsUpgrade apache2-mod_php72Upgrade php8-bcmathUpgrade php72-soapUpgrade php7-enchantUpgrade php7-sodiumUpgrade php72-xslUpgrade php74Upgrade php74-iconvUpgrade php8-embedUpgrade php74-intlUpgrade php7-mysqlUpgrade php72-tidyUpgrade php72-wddx | Nov 19, 2021 | Oct 25, 2021 |
| Ubuntu | — | Upgrade php7.2-fpmUpgrade php7.0-fpm (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade php7.4-fpmUpgrade php8.0-fpm | Oct 28, 2021 | Oct 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub