In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-develUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-embeddedUpgrade php-xmlUpgrade php-gmpUpgrade php-dbgUpgrade php-pearUpgrade php-pecl-zipUpgrade phpUpgrade php-jsonUpgrade php-fpmUpgrade php-odbcUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade libzipUpgrade php-enchantUpgrade php-ffiUpgrade php-xmlrpcUpgrade php-gdUpgrade apcu-panelUpgrade libzip-toolsUpgrade php-intlUpgrade php-mysqlndUpgrade php-soapUpgrade php-processUpgrade php-opcacheUpgrade libzip-develUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-dbaUpgrade php-snmpUpgrade php-cliUpgrade php-mbstring | May 13, 2022 | Oct 25, 2021 |
| Alpine Linux | — | Upgrade php81Upgrade php8Upgrade php7 | Aug 22, 2024 | Oct 25, 2021 |
| Centos_linux | — | Upgrade php-intlUpgrade php-gmpUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade apcu-panelUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-soap-debuginfoUpgrade php-ffiUpgrade php-pecl-zipUpgrade php-json-debuginfoUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-dba-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade php-jsonUpgrade libzip-debuginfoUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-pecl-rrdUpgrade php-debuginfoUpgrade phpUpgrade php-processUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade php-xml-debuginfoUpgrade libzipUpgrade php-process-debuginfoUpgrade php-gdUpgrade php-ffi-debuginfoUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade php-pearUpgrade php-pecl-rrd-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade php-snmpUpgrade php-embeddedUpgrade php-common-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pdoUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-mysqlndUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-develUpgrade php-bcmathUpgrade php-debugsourceUpgrade php-xmlUpgrade php-embedded-debuginfo | May 13, 2022 | Oct 25, 2021 |
| Debian | — | Upgrade php7.4 | Nov 29, 2021 | Oct 25, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Sep 30, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pdoUpgrade php-xmlUpgrade php-soapUpgrade php-gdUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-ldapUpgrade php-processUpgrade php-odbcUpgrade php-recodeUpgrade php-commonUpgrade phpUpgrade php-cli | Dec 28, 2021 | Oct 25, 2021 |
| Oracle Solaris | — | Upgrade web/php-80 to version 8.0.12-11.4.40.0.1.107.1 on Solaris 11.4Upgrade web/php-74 to version 7.4.25-11.4.40.0.1.107.1 on Solaris 11.4Upgrade web/php-73 to version 7.3.32-11.4.40.0.1.107.2 on Solaris 11.4 | Dec 13, 2021 | Oct 25, 2021 |
| Oracle_linux | — | Upgrade php-ldapUpgrade php-pearUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-gdUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-enchantUpgrade php-pdoUpgrade php-embeddedUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-fpmUpgrade libzipUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-pecl-rrdUpgrade phpUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-opcacheUpgrade php-commonUpgrade php-snmpUpgrade php-mysqlndUpgrade php-processUpgrade php-odbcUpgrade php-xmlUpgrade libzip-develUpgrade php-mbstringUpgrade php-intlUpgrade php-ffi | May 18, 2022 | Oct 20, 2021 |
| Php | — | Upgrade to PHP version 7.4.24Upgrade to PHP version 7.3.31Upgrade to PHP version 8.0.11 | Nov 30, 2021 | Oct 25, 2021 |
| Redhat_linux | — | Upgrade php-develUpgrade php-odbcUpgrade php-soap-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-toolsNo solution existsUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebugUpgrade php-cli-debuginfoUpgrade php-pearUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-commonUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade php-mbstringUpgrade libzip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zipUpgrade php-soapUpgrade php-embeddedUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbaUpgrade php-cliUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-enchant-debuginfoUpgrade libzip-develUpgrade php-gd-debuginfoUpgrade php-xmlUpgrade php-ffi-debuginfoUpgrade php-ldapUpgrade php-pdoUpgrade php-pecl-apcu-debugsourceUpgrade php-gdUpgrade php-gmp-debuginfoUpgrade php-pecl-apcuUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-snmpUpgrade php-ffiUpgrade php-intlUpgrade libzip-debugsourceUpgrade php-opcacheUpgrade php-enchantUpgrade libzip-tools-debuginfoUpgrade phpUpgrade php-jsonUpgrade php-processUpgrade php-bcmathUpgrade apcu-panelUpgrade php-pecl-xdebug-debuginfoUpgrade php-mysqlnd | May 13, 2022 | Oct 25, 2021 |
| Rocky_linux | — | Upgrade php-fpmUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-dbaUpgrade php-processUpgrade php-cliUpgrade php-gmpUpgrade php-snmp-debuginfoUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-odbc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-jsonUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlUpgrade libzip-tools-debuginfoUpgrade php-mysqlndUpgrade php-snmpUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-xmlrpcUpgrade php-gdUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-ffiUpgrade php-bcmathUpgrade php-ldapUpgrade libzip-develUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-embeddedUpgrade php-soap-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-dba-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-debugsourceUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-opcacheUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-odbcUpgrade php-pdo-debuginfoUpgrade php-intlUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-commonUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade phpUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-toolsUpgrade libzipUpgrade php-ffi-debuginfo | Mar 5, 2024 | Oct 25, 2021 |
| Suse | — | Upgrade php74-mbstringUpgrade php74-snmpUpgrade php72-iconvUpgrade php74-develUpgrade php72-calendarUpgrade php74-intlUpgrade php74-sqliteUpgrade php7-calendarUpgrade php8-socketsUpgrade php7-develUpgrade php7-ldapUpgrade php7-fastcgiUpgrade apache2-mod_php72Upgrade php72-gmpUpgrade php8-exifUpgrade php72-domUpgrade php8-intlUpgrade php72-soapUpgrade php7-shmopUpgrade php7-firebirdUpgrade php7-odbcUpgrade php7-ctypeUpgrade php8-readlineUpgrade php72-pharUpgrade php72-mbstringUpgrade php74-gdUpgrade php72-jsonUpgrade php72-pcntlUpgrade php8-bcmathUpgrade php74-socketsUpgrade php7-zlibUpgrade php7-testUpgrade php7-dbaUpgrade php8-gdUpgrade php8-testUpgrade php72-pear-archive_tarUpgrade php72-tokenizerUpgrade php72-ldapUpgrade php8-gettextUpgrade php72-pearUpgrade php7-opcacheUpgrade php7-enchantUpgrade php8-soapUpgrade php8-domUpgrade php74-pdoUpgrade php8-bz2Upgrade php72-gdUpgrade php8-enchantUpgrade php8-pdoUpgrade php8-calendarUpgrade php7-fileinfoUpgrade php74-sysvshmUpgrade php72-ftpUpgrade php72-enchantUpgrade php8-ldapUpgrade php72-imapUpgrade php8-sysvmsgUpgrade php8-embedUpgrade php74Upgrade php72-intlUpgrade php72-develUpgrade php7-xmlwriterUpgrade php72-opensslUpgrade php72-wddxUpgrade php8-sysvshmUpgrade php7-pearUpgrade php8-zipUpgrade php72-xslUpgrade php74-iconvUpgrade php74-curlUpgrade apache2-mod_php74Upgrade php7-pear-archive_tarUpgrade php72-opcacheUpgrade php8-sodiumUpgrade php72-dbaUpgrade php74-tidyUpgrade php8-cliUpgrade php74-soapUpgrade php8-ctypeUpgrade php72-posixUpgrade php74-sodiumUpgrade php8-shmopUpgrade php8-opcacheUpgrade php8-develUpgrade php72-ctypeUpgrade php7-sysvsemUpgrade php74-odbcUpgrade php74-bcmathUpgrade php7-mysqlUpgrade php72-tidyUpgrade php7-zipUpgrade php74-enchantUpgrade php7-sysvshmUpgrade php72-gettextUpgrade php7-sodiumUpgrade php74-fileinfoUpgrade php74-pcntlUpgrade php74-ldapUpgrade php8-fastcgiUpgrade php74-posixUpgrade php8-opensslUpgrade php7-bcmathUpgrade php72-readlineUpgrade php7-bz2Upgrade php7-jsonUpgrade php74-tokenizerUpgrade php72-zlibUpgrade php74-ctypeUpgrade php74-zlibUpgrade php7-xmlrpcUpgrade php72-odbcUpgrade php8-zlibUpgrade php72-sodiumUpgrade php74-jsonUpgrade php7-pdoUpgrade apache2-mod_php7Upgrade php8-snmpUpgrade php8-odbcUpgrade php7-soapUpgrade php72-pspellUpgrade php7-gmpUpgrade php8Upgrade php74-zipUpgrade php72-xmlwriterUpgrade php74-readlineUpgrade php74-pharUpgrade php7-embedUpgrade php74-ftpUpgrade php7-xmlreaderUpgrade php74-sysvmsgUpgrade php8-fileinfoUpgrade php72-bcmathUpgrade php72-sysvsemUpgrade php72-pgsqlUpgrade php72-fpmUpgrade php72-sqliteUpgrade php7-pcntlUpgrade php72-sysvmsgUpgrade php74-xslUpgrade php74-bz2Upgrade php8-xmlreaderUpgrade php72-bz2Upgrade php8-pgsqlUpgrade php8-dbaUpgrade php8-sqliteUpgrade php8-pcntlUpgrade php7-exifUpgrade php8-mysqlUpgrade php72-exifUpgrade php8-sysvsemUpgrade php7-socketsUpgrade php7-gettextUpgrade php7-iconvUpgrade php7-sysvmsgUpgrade php7Upgrade php7-xslUpgrade php8-posixUpgrade php7-wddxUpgrade php8-mbstringUpgrade php74-opensslUpgrade php74-dbaUpgrade php72-xmlrpcUpgrade php72-sysvshmUpgrade php7-sqliteUpgrade php74-xmlreaderUpgrade php72-snmpUpgrade php7-mbstringUpgrade php8-pharUpgrade php8-ftpUpgrade php8-iconvUpgrade php7-pharUpgrade php7-tokenizerUpgrade apache2-mod_php8Upgrade php74-sysvsemUpgrade php74-shmopUpgrade php7-snmpUpgrade php7-posixUpgrade php7-tidyUpgrade php72-pdoUpgrade php8-tidyUpgrade php7-curlUpgrade php8-xmlwriterUpgrade php72-fastcgiUpgrade php74-fastcgiUpgrade php8-fpmUpgrade php74-xmlrpcUpgrade php8-gmpUpgrade php8-xslUpgrade php72-fileinfoUpgrade php74-calendarUpgrade php72-curlUpgrade php74-domUpgrade php74-fpmUpgrade php72-xmlreaderUpgrade php72-mysqlUpgrade php7-pgsqlUpgrade php7-opensslUpgrade php7-domUpgrade php72Upgrade php74-pgsqlUpgrade php8-tokenizerUpgrade php8-curlUpgrade php74-xmlwriterUpgrade php74-gmpUpgrade php74-opcacheUpgrade php74-gettextUpgrade php74-exifUpgrade php72-zipUpgrade php72-socketsUpgrade php7-intlUpgrade php74-mysqlUpgrade php72-shmopUpgrade php7-fpmUpgrade php7-gdUpgrade php7-readlineUpgrade php7-cliUpgrade php7-ftp | Nov 19, 2021 | Oct 25, 2021 |
| Ubuntu | — | Upgrade php8.0-fpmUpgrade php7.4-fpmUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php7.0-fpm (Ubuntu Pro) | Oct 28, 2021 | Oct 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub