A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade php-odbcUpgrade php-sodiumUpgrade php-cliUpgrade php-snmpUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-xmlUpgrade php-commonUpgrade php-dbgUpgrade php-debuginfoUpgrade php-intlUpgrade php-mbstringUpgrade php-gdUpgrade php-soapUpgrade phpUpgrade php-pspellUpgrade php-enchantUpgrade php-pdoUpgrade php-gmpUpgrade php-embeddedUpgrade php-dbaUpgrade php-bcmathUpgrade php-ldapUpgrade php-processUpgrade php-fpmUpgrade php-pgsqlUpgrade php-devel | Feb 7, 2024 | Nov 2, 2023 |
| Debian | — | Upgrade php7.4 | Oct 17, 2024 | Nov 2, 2023 |
| Php | — | Upgrade to PHP version 8.0.21Upgrade to PHP version 8.1.8 | Nov 13, 2023 | Nov 2, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 2, 2023 |
| Suse | — | Upgrade php74-xslUpgrade apache2-mod_php7Upgrade php74-zipUpgrade php7-snmpUpgrade php74-fileinfoUpgrade php74-jsonUpgrade php74-gdUpgrade php7-sysvmsgUpgrade php74-tokenizerUpgrade php74-gettextUpgrade php7-calendarUpgrade php7-pcntlUpgrade php7-intlUpgrade php74-tidyUpgrade php7-zipUpgrade php74-sqliteUpgrade php7-opcacheUpgrade apache2-mod_php74Upgrade php74-shmopUpgrade php74-readlineUpgrade php74-opcacheUpgrade php7-curlUpgrade php7-ctypeUpgrade php7-sysvsemUpgrade php74-odbcUpgrade php7-fileinfoUpgrade php7-testUpgrade php74-curlUpgrade php74-pcntlUpgrade php7-iconvUpgrade php74-enchantUpgrade php7-enchantUpgrade php74-fastcgiUpgrade php7-bcmathUpgrade php74-pgsqlUpgrade php7-pgsqlUpgrade php74-pdoUpgrade php74-snmpUpgrade php7-tokenizerUpgrade php74-sysvsemUpgrade php74-develUpgrade php7-fastcgiUpgrade php7-pharUpgrade php7-xmlwriterUpgrade php74-bz2Upgrade php74-sodiumUpgrade php74-sysvshmUpgrade php74-mysqlUpgrade php74-fpmUpgrade php7-ftpUpgrade php74-ldapUpgrade php7-firebirdUpgrade php7Upgrade php74-xmlwriterUpgrade php7-bz2Upgrade php74-pharUpgrade php74-calendarUpgrade php7-ldapUpgrade php74-opensslUpgrade php7-jsonUpgrade php7-readlineUpgrade php74-bcmathUpgrade php74-exifUpgrade php7-zlibUpgrade php7-sodiumUpgrade php7-tidyUpgrade php7-sqliteUpgrade php74-zlibUpgrade php74-gmpUpgrade php74-intlUpgrade php7-embedUpgrade php74-ctypeUpgrade php7-pdoUpgrade php7-opensslUpgrade php7-gettextUpgrade php74-dbaUpgrade php7-gdUpgrade php7-cliUpgrade php74-xmlreaderUpgrade php74-sysvmsgUpgrade php7-xmlreaderUpgrade php74-socketsUpgrade php7-mysqlUpgrade php7-xslUpgrade php7-socketsUpgrade php7-domUpgrade php7-shmopUpgrade php7-soapUpgrade php74-ftpUpgrade php74Upgrade php7-mbstringUpgrade php7-dbaUpgrade php74-soapUpgrade php74-iconvUpgrade php74-domUpgrade php7-develUpgrade php74-mbstringUpgrade php7-gmpUpgrade php74-posixUpgrade php74-xmlrpcUpgrade php7-xmlrpcUpgrade php7-sysvshmUpgrade php7-odbcUpgrade php7-fpmUpgrade php7-posixUpgrade php7-exif | Mar 28, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade php7.4-fpmUpgrade php7.4-cliUpgrade php8.1Upgrade libapache2-mod-php8.1Upgrade php8.1-fpmUpgrade php7.4-xmlUpgrade php8.1-cliUpgrade php7.4-cgiUpgrade libapache2-mod-php7.4Upgrade php8.1-xmlUpgrade php7.4Upgrade php8.1-cgi | Apr 30, 2024 | Nov 2, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub