A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade php-enchantUpgrade php-soapUpgrade php-ldapUpgrade php-bcmathUpgrade php-gdUpgrade php-dbaUpgrade php-develUpgrade php-pspellUpgrade php-pdoUpgrade phpUpgrade php-gmpUpgrade php-processUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-fpmUpgrade php-odbcUpgrade php-intlUpgrade php-mbstringUpgrade php-xmlUpgrade php-snmpUpgrade php-debuginfoUpgrade php-commonUpgrade php-cliUpgrade php-dbgUpgrade php-mysqlndUpgrade php-sodiumUpgrade php-opcache | Feb 7, 2024 | Nov 2, 2023 |
| Debian | — | Upgrade php7.4 | Oct 17, 2024 | Nov 2, 2023 |
| Php | — | Upgrade to PHP version 8.1.8Upgrade to PHP version 8.0.21 | Nov 13, 2023 | Nov 2, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 2, 2023 |
| Suse | — | Upgrade php7-fileinfoUpgrade php74-enchantUpgrade php74-mysqlUpgrade php74-odbcUpgrade php7-iconvUpgrade php7-calendarUpgrade php7-pharUpgrade php74-opcacheUpgrade php74-tidyUpgrade php7-curlUpgrade php7-xmlwriterUpgrade php7-fastcgiUpgrade php7-sysvsemUpgrade php7-testUpgrade php74-develUpgrade php7-tokenizerUpgrade php7-zipUpgrade php74-fpmUpgrade php74-sysvshmUpgrade php7-ctypeUpgrade php7-intlUpgrade php74-readlineUpgrade php74-bz2Upgrade php7-pgsqlUpgrade php74-xslUpgrade php7-snmpUpgrade php74-tokenizerUpgrade php7-opcacheUpgrade php74-pgsqlUpgrade php74-curlUpgrade php7-ftpUpgrade php74-sodiumUpgrade apache2-mod_php74Upgrade php74-sqliteUpgrade apache2-mod_php7Upgrade php7-pcntlUpgrade php7-bcmathUpgrade php74-snmpUpgrade php74-fileinfoUpgrade php74-shmopUpgrade php74-jsonUpgrade php74-pcntlUpgrade php7-enchantUpgrade php74-zipUpgrade php74-fastcgiUpgrade php74-pdoUpgrade php74-gdUpgrade php7-sysvmsgUpgrade php74-gettextUpgrade php74-sysvsemUpgrade php7-posixUpgrade php7-shmopUpgrade php7-exifUpgrade php74-iconvUpgrade php7-embedUpgrade php7-zlibUpgrade php7-ldapUpgrade php7-develUpgrade php7-bz2Upgrade php74-domUpgrade php7-socketsUpgrade php7-soapUpgrade php74-xmlrpcUpgrade php7-dbaUpgrade php7-mysqlUpgrade php7-fpmUpgrade php7-sysvshmUpgrade php7-odbcUpgrade php7-xslUpgrade php7-xmlrpcUpgrade php7-readlineUpgrade php74-soapUpgrade php74-posixUpgrade php74-xmlreaderUpgrade php7-pdoUpgrade php74-ctypeUpgrade php74-dbaUpgrade php7-opensslUpgrade php7-gettextUpgrade php7-cliUpgrade php7Upgrade php74-xmlwriterUpgrade php74-socketsUpgrade php7-sodiumUpgrade php7-sqliteUpgrade php74-zlibUpgrade php7-tidyUpgrade php74-gmpUpgrade php74-intlUpgrade php74Upgrade php74-mbstringUpgrade php74-bcmathUpgrade php7-mbstringUpgrade php7-jsonUpgrade php74-ftpUpgrade php7-gmpUpgrade php74-sysvmsgUpgrade php7-gdUpgrade php74-ldapUpgrade php74-opensslUpgrade php74-pharUpgrade php74-calendarUpgrade php7-domUpgrade php7-xmlreaderUpgrade php74-exifUpgrade php7-firebird | Mar 28, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade libapache2-mod-php7.4Upgrade php7.4-cgiUpgrade php8.1-cliUpgrade php8.1-cgiUpgrade php8.1-xmlUpgrade php7.4Upgrade php7.4-cliUpgrade libapache2-mod-php8.1Upgrade php8.1-fpmUpgrade php8.1Upgrade php7.4-xmlUpgrade php7.4-fpm | Apr 30, 2024 | Nov 2, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub