In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-ffiUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-commonUpgrade php-pecl-zipUpgrade php-bcmathUpgrade phpUpgrade php-dbgUpgrade php-ldapUpgrade php-embeddedUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-intlUpgrade apcu-panelUpgrade libzipUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-processUpgrade php-cliUpgrade php-xmlrpcUpgrade php-pearUpgrade php-gdUpgrade php-fpmUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3Upgrade php-enchantUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-snmpUpgrade php-gmpUpgrade php-mbstringUpgrade libzip-develUpgrade php-mysqlndUpgrade php-xmlUpgrade php-opcacheUpgrade php-devel | Oct 23, 2023 | Feb 16, 2023 |
| Alpine Linux | — | Upgrade php82Upgrade php7Upgrade php8Upgrade php81 | Aug 22, 2024 | Feb 16, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-pgsqlUpgrade php-fpmUpgrade php-soapUpgrade php-commonUpgrade php-pdoUpgrade php-develUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-processUpgrade php-odbcUpgrade php-mbstringUpgrade phpUpgrade php-cliUpgrade php-xmlUpgrade php-bcmathUpgrade php-recodeUpgrade php-mysqlndUpgrade php-enchantUpgrade php-dbaUpgrade php-snmpUpgrade php-opcacheUpgrade php-gdUpgrade php-sodiumUpgrade php-dbgUpgrade php-intlUpgrade php-embeddedUpgrade php-pspellUpgrade php-debuginfoUpgrade php-ldap | Sep 21, 2023 | Feb 16, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.1-common-debuginfoUpgrade php8.1-ldapUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-develUpgrade php8.1-fpmUpgrade php8.1-gmpUpgrade php8.1-xmlUpgrade php8.1-embeddedUpgrade php8.1-cli-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-soapUpgrade php8.1-tidy-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-mbstringUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-pdoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-pgsqlUpgrade php8.1-processUpgrade php8.1-dbgUpgrade php8.1-ffiUpgrade php8.1-commonUpgrade php8.1-intl-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-cliUpgrade php8.1-ldap-debuginfoUpgrade php8.1-odbcUpgrade php8.1-gd-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-enchantUpgrade php8.1-gdUpgrade php8.1-bcmathUpgrade php8.1-debugsourceUpgrade php8.1-process-debuginfoUpgrade php8.1-tidyUpgrade php8.1-dbaUpgrade php8.1-intlUpgrade php8.1Upgrade php8.1-embedded-debuginfo | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-develUpgrade php-pdoUpgrade php-soapUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pearUpgrade php-gmp-debuginfoUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-enchant-debuginfoUpgrade php-processUpgrade php-gmpUpgrade php-pecl-zip-debugsourceUpgrade php-process-debuginfoUpgrade php-pecl-apcuUpgrade php-xml-debuginfoUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-fpmUpgrade php-embeddedUpgrade php-cli-debuginfoUpgrade php-ldapUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade libzipUpgrade php-fpm-debuginfoUpgrade libzip-debuginfoUpgrade libzip-debugsourceUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrdUpgrade php-odbc-debuginfoUpgrade php-bcmathUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug3Upgrade php-ffi-debuginfoUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-commonUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-intl-debuginfoUpgrade php-intlUpgrade php-cliUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade phpUpgrade php-mysqlndUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-opcacheUpgrade php-mbstring-debuginfoUpgrade php-opcache-debuginfoUpgrade php-ffiUpgrade apcu-panelUpgrade php-xmlUpgrade php-pecl-zip-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-debuginfo | Nov 1, 2023 | Feb 16, 2023 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Feb 27, 2023 | Feb 16, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 24, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Feb 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-gdUpgrade php-odbcUpgrade php-soapUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-processUpgrade phpUpgrade php-cliUpgrade php-commonUpgrade php-xmlUpgrade php-ldapUpgrade php-recode | Jun 9, 2023 | Feb 16, 2023 |
| Oracle_linux | — | Upgrade php-pdoUpgrade php-bcmathUpgrade php-enchantUpgrade php-jsonUpgrade php-pecl-xdebug3Upgrade php-embeddedUpgrade php-fpmUpgrade php-odbcUpgrade php-pearUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-commonUpgrade php-gmpUpgrade php-dbgUpgrade libzipUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-cliUpgrade php-ffiUpgrade apcu-panelUpgrade php-snmpUpgrade php-opcacheUpgrade php-gdUpgrade php-mysqlndUpgrade libzip-develUpgrade php-intlUpgrade php-processUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-dbaUpgrade phpUpgrade php-pgsql | Oct 23, 2023 | Feb 15, 2023 |
| Php | — | Upgrade to PHP version 8.0.28Upgrade to PHP version 8.2.3Upgrade to PHP version 8.1.16 | Feb 27, 2023 | Feb 16, 2023 |
| Redhat_linux | — | Upgrade php-json-debuginfoUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-dbg-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debugsourceUpgrade php-ffiUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-opcacheUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-processUpgrade php-soap-debuginfoUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-ldap-debuginfoUpgrade phpUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-develUpgrade php-commonUpgrade apcu-panelUpgrade libzipUpgrade php-fpmUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-pearUpgrade php-dbgUpgrade php-mysqlnd-debuginfoUpgrade php-bcmathUpgrade php-gdUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-dba-debuginfoUpgrade php-embeddedUpgrade php-odbcUpgrade php-pecl-zip-debugsourceUpgrade php-enchantUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-ffi-debuginfoUpgrade php-develUpgrade php-pecl-xdebug3No solution existsUpgrade libzip-tools-debuginfoUpgrade php-mbstringUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade php-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-pdoUpgrade php-xmlUpgrade php-pecl-xdebug3-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsource | Nov 1, 2023 | Feb 16, 2023 |
| Rocky_linux | — | Upgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade libzipUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-embedded-debuginfoUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-pecl-zip-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebugUpgrade php-debugsourceUpgrade php-pecl-xdebug3Upgrade php-xmlUpgrade php-fpmUpgrade php-jsonUpgrade php-pecl-xdebug3-debuginfoUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-gmpUpgrade php-mbstringUpgrade php-embeddedUpgrade php-enchant-debuginfoUpgrade php-cliUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-dbg-debuginfoUpgrade php-dbgUpgrade php-pecl-rrd-debuginfoUpgrade php-commonUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pdoUpgrade php-ffi-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soap-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debugsourceUpgrade php-opcache-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-debugsourceUpgrade php-odbcUpgrade php-json-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pdo-debuginfoUpgrade php-gdUpgrade phpUpgrade php-pecl-rrdUpgrade php-debuginfoUpgrade php-cli-debuginfoUpgrade php-enchantUpgrade php-pgsqlUpgrade php-gmp-debuginfoUpgrade php-ffiUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-intl-debuginfoUpgrade php-processUpgrade libzip-debuginfoUpgrade php-dbaUpgrade php-pgsql-debuginfo | Mar 5, 2024 | Feb 16, 2023 |
| Suse | — | Upgrade php8Upgrade php7-pearUpgrade php74-fpmUpgrade php74-gdUpgrade php74-fastcgiUpgrade php74-tidyUpgrade php7-sqliteUpgrade php7-sysvshmUpgrade php7-tokenizerUpgrade php8-intlUpgrade php8-gmpUpgrade php8-embedUpgrade php8-gdUpgrade php8-sqliteUpgrade php7-snmpUpgrade php74-fileinfoUpgrade php74-pdoUpgrade php8-pdoUpgrade php74-develUpgrade php74-pcntlUpgrade php7-odbcUpgrade php74-socketsUpgrade php8-ldapUpgrade php74-tokenizerUpgrade php7-ctypeUpgrade php8-bcmathUpgrade php7-sysvsemUpgrade php7-opcacheUpgrade php74-sysvshmUpgrade php7-shmopUpgrade php74-sodiumUpgrade php8-shmopUpgrade php8-socketsUpgrade php8-testUpgrade php8-curlUpgrade php7-calendarUpgrade php74-intlUpgrade apache2-mod_php8Upgrade php74-posixUpgrade php8-opcacheUpgrade php74-shmopUpgrade php8-exifUpgrade php8-domUpgrade php7-zlibUpgrade php8-sodiumUpgrade php74-iconvUpgrade php74-sqliteUpgrade php8-zipUpgrade php7-bcmathUpgrade php8-readlineUpgrade php8-enchantUpgrade php74-odbcUpgrade php8-ctypeUpgrade php7-testUpgrade php74-bcmathUpgrade php7-develUpgrade php74-mbstringUpgrade php74-curlUpgrade php7-fastcgiUpgrade php8-calendarUpgrade php8-sysvshmUpgrade php7-dbaUpgrade php7-ldapUpgrade php7-fileinfoUpgrade php7-zipUpgrade php74-enchantUpgrade php8-bz2Upgrade php8-sysvsemUpgrade php7-pharUpgrade php7-readlineUpgrade php7-enchantUpgrade php8-gettextUpgrade php7-wddxUpgrade php7-mysqlUpgrade php8-pgsqlUpgrade php7-pear-archive_tarUpgrade php7-socketsUpgrade php74-soapUpgrade php74-readlineUpgrade php7-cliUpgrade php8-sysvmsgUpgrade php7-xmlreaderUpgrade php74-opcacheUpgrade php8-tidyUpgrade php74-gmpUpgrade php7-xslUpgrade php7-soapUpgrade php7-exifUpgrade php74-ctypeUpgrade php7-iconvUpgrade php8-odbcUpgrade php7-opensslUpgrade php7-intlUpgrade php74-sysvsemUpgrade php74-pgsqlUpgrade php74-bz2Upgrade php7-posixUpgrade php7-fpmUpgrade php8-xmlreaderUpgrade php74-xmlrpcUpgrade php8-iconvUpgrade php8-mysqlUpgrade php8-ftpUpgrade php8-fastcgiUpgrade php8-develUpgrade php7-sysvmsgUpgrade php74-domUpgrade php74-sysvmsgUpgrade php8-soapUpgrade php74-mysqlUpgrade php74-ftpUpgrade php74-jsonUpgrade php8-zlibUpgrade php74-opensslUpgrade apache2-mod_php7Upgrade php74-exifUpgrade php74Upgrade php8-posixUpgrade php8-pharUpgrade php7-xmlwriterUpgrade php7-pcntlUpgrade php7-pdoUpgrade php7-tidyUpgrade php7-domUpgrade php8-opensslUpgrade php8-fpmUpgrade php7-embedUpgrade php74-xslUpgrade php74-zipUpgrade php8-xslUpgrade php7Upgrade php7-gdUpgrade php74-xmlwriterUpgrade php74-zlibUpgrade php7-ftpUpgrade php8-xmlwriterUpgrade php74-xmlreaderUpgrade php7-bz2Upgrade php8-mbstringUpgrade php7-curlUpgrade php8-fileinfoUpgrade php8-dbaUpgrade php74-snmpUpgrade php7-pgsqlUpgrade php7-jsonUpgrade php7-gettextUpgrade apache2-mod_php74Upgrade php8-tokenizerUpgrade php74-gettextUpgrade php7-xmlrpcUpgrade php74-pharUpgrade php74-calendarUpgrade php7-firebirdUpgrade php74-ldapUpgrade php7-sodiumUpgrade php8-pcntlUpgrade php7-gmpUpgrade php8-cliUpgrade php74-dbaUpgrade php7-mbstringUpgrade php8-snmp | Feb 23, 2023 | Feb 16, 2023 |
| Ubuntu | — | Upgrade php7.2Upgrade php7.2-cliUpgrade php7.2-fpmUpgrade php7.4Upgrade libapache2-mod-php7.4Upgrade php8.1-fpmUpgrade php7.4-cgiUpgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.0-zip (Ubuntu Pro)Upgrade php8.1-cgiUpgrade php7.0-cli (Ubuntu Pro)Upgrade php7.2-cgiUpgrade php7.0-cgi (Ubuntu Pro)Upgrade libapache2-mod-php8.1Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php8.1Upgrade php7.4-cliUpgrade php7.0 (Ubuntu Pro)Upgrade php8.1-cliUpgrade libapache2-mod-php7.2Upgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade php7.4-fpm | Mar 22, 2023 | Feb 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub