In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-develUpgrade php-pdoUpgrade php-processUpgrade php-xmlrpcUpgrade php-pecl-xdebug3Upgrade php-mysqlndUpgrade php-opcacheUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-develUpgrade php-cliUpgrade php-gmpUpgrade php-fpmUpgrade php-snmpUpgrade php-mbstringUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-ffiUpgrade php-pecl-zipUpgrade php-commonUpgrade libzip-toolsUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-odbcUpgrade php-ldapUpgrade php-dbaUpgrade php-soapUpgrade php-bcmathUpgrade php-dbgUpgrade php-embeddedUpgrade phpUpgrade php-pecl-apcu-develUpgrade libzip | Oct 23, 2023 | Feb 16, 2023 |
| Alpine Linux | — | Upgrade php8Upgrade php81Upgrade php7Upgrade php82 | Aug 22, 2024 | Feb 16, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-fpmUpgrade php-commonUpgrade php-develUpgrade php-soapUpgrade php-mbstringUpgrade php-processUpgrade php-pdoUpgrade php-pgsqlUpgrade php-odbcUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-cliUpgrade php-recodeUpgrade php-pspellUpgrade php-gdUpgrade php-mysqlndUpgrade php-ldapUpgrade php-sodiumUpgrade php-dbgUpgrade php-opcacheUpgrade php-debuginfoUpgrade phpUpgrade php-xmlUpgrade php-snmpUpgrade php-bcmathUpgrade php-dbaUpgrade php-intlUpgrade php-embedded | Sep 21, 2023 | Feb 16, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.1-cli-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-fpm-debuginfoUpgrade php8.1-xmlUpgrade php8.1-processUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-dbgUpgrade php8.1-pgsqlUpgrade php8.1-xml-debuginfoUpgrade php8.1-soapUpgrade php8.1-ldapUpgrade php8.1-tidy-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-fpmUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-mbstringUpgrade php8.1-gmpUpgrade php8.1-pdoUpgrade php8.1-embeddedUpgrade php8.1-common-debuginfoUpgrade php8.1-develUpgrade php8.1-dbaUpgrade php8.1-opcache-debuginfoUpgrade php8.1-commonUpgrade php8.1-odbcUpgrade php8.1-debugsourceUpgrade php8.1-process-debuginfoUpgrade php8.1-bcmathUpgrade php8.1-gdUpgrade php8.1-ffi-debuginfoUpgrade php8.1-ldap-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-intl-debuginfoUpgrade php8.1-ffiUpgrade php8.1-enchantUpgrade php8.1-cliUpgrade php8.1-tidyUpgrade php8.1-intlUpgrade php8.1-embedded-debuginfoUpgrade php8.1 | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade php-commonUpgrade php-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-dba-debuginfoUpgrade php-ffiUpgrade apcu-panelUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-cliUpgrade php-xmlUpgrade php-snmpUpgrade php-opcacheUpgrade php-odbcUpgrade php-pecl-rrd-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mbstringUpgrade php-intlUpgrade libzip-toolsUpgrade php-common-debuginfoUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-soapUpgrade php-fpm-debuginfoUpgrade php-develUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-processUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pearUpgrade php-gmpUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-ldapUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-xdebug3 | Nov 1, 2023 | Feb 16, 2023 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Feb 27, 2023 | Feb 16, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 24, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Feb 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade php-cliUpgrade php-recodeUpgrade php-commonUpgrade phpUpgrade php-xmlUpgrade php-processUpgrade php-odbcUpgrade php-pdoUpgrade php-soapUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-gd | Jun 9, 2023 | Feb 16, 2023 |
| Oracle_linux | — | Upgrade php-intlUpgrade php-processUpgrade libzip-develUpgrade php-cliUpgrade php-ffiUpgrade php-gdUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-dbaUpgrade php-mbstringUpgrade php-snmpUpgrade php-pgsqlUpgrade apcu-panelUpgrade phpUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-gmpUpgrade php-jsonUpgrade php-xmlUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-ldapUpgrade libzipUpgrade php-develUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3Upgrade php-pdoUpgrade php-bcmathUpgrade php-enchantUpgrade php-pearUpgrade php-fpmUpgrade php-embeddedUpgrade php-dbg | Oct 23, 2023 | Feb 15, 2023 |
| Php | — | Upgrade to PHP version 8.0.28Upgrade to PHP version 8.2.3Upgrade to PHP version 8.1.16 | Feb 27, 2023 | Feb 16, 2023 |
| Redhat_linux | — | Upgrade php-processUpgrade php-commonUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlndUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-common-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-debuginfoUpgrade apcu-panelUpgrade php-snmpUpgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-dbaUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade php-gmp-debuginfoUpgrade php-cliUpgrade php-json-debuginfoUpgrade libzip-develUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ffiUpgrade php-xmlUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-gdUpgrade php-debugsourceUpgrade php-xml-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-mbstringUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-pecl-rrd-debuginfoUpgrade php-develUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pearUpgrade php-enchant-debuginfoUpgrade php-pgsqlUpgrade php-odbc-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebug3-debuginfoNo solution existsUpgrade php-ffi-debuginfoUpgrade php-gmpUpgrade libzip-tools-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dba-debuginfoUpgrade libzipUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug3Upgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdoUpgrade php-mysqlnd-debuginfo | Nov 1, 2023 | Feb 16, 2023 |
| Rocky_linux | — | Upgrade php-process-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-intl-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-ffiUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-dbaUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade phpUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade php-fpm-debuginfoUpgrade php-processUpgrade libzip-debugsourceUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdoUpgrade php-mysqlnd-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-cliUpgrade php-jsonUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-snmpUpgrade php-opcacheUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-xmlUpgrade php-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-dbgUpgrade php-commonUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-develUpgrade php-pecl-xdebug3-debuginfoUpgrade php-common-debuginfoUpgrade php-ldapUpgrade php-pecl-zip-debugsourceUpgrade php-mbstringUpgrade php-gmpUpgrade libzip | Mar 5, 2024 | Feb 16, 2023 |
| Suse | — | Upgrade php7-pearUpgrade php7-testUpgrade php8-opcacheUpgrade php74-iconvUpgrade php8-enchantUpgrade php8-bcmathUpgrade php8-ctypeUpgrade php8-bz2Upgrade php8-gettextUpgrade php8-readlineUpgrade php8-pgsqlUpgrade php7-socketsUpgrade php7-enchantUpgrade php74-posixUpgrade php74-sysvshmUpgrade php8-domUpgrade php7-develUpgrade php74-odbcUpgrade php8-sysvsemUpgrade php7-dbaUpgrade php8-sqliteUpgrade php7-snmpUpgrade php74-pdoUpgrade php8Upgrade php8-embedUpgrade php7-odbcUpgrade php7-sysvshmUpgrade php7-ldapUpgrade php8-socketsUpgrade php8-sysvshmUpgrade php7-sqliteUpgrade php7-tokenizerUpgrade php74-fileinfoUpgrade php7-mysqlUpgrade php74-gdUpgrade php74-fpmUpgrade php8-pdoUpgrade php8-curlUpgrade php8-intlUpgrade php74-enchantUpgrade php8-testUpgrade php8-gdUpgrade php8-gmpUpgrade php74-fastcgiUpgrade php74-tidyUpgrade php74-shmopUpgrade php7-zipUpgrade php74-intlUpgrade php7-fastcgiUpgrade apache2-mod_php8Upgrade php74-pcntlUpgrade php74-socketsUpgrade php74-curlUpgrade php74-tokenizerUpgrade php8-calendarUpgrade php7-sysvsemUpgrade php7-pear-archive_tarUpgrade php7-pharUpgrade php7-bcmathUpgrade php7-ctypeUpgrade php7-wddxUpgrade php7-opcacheUpgrade php7-zlibUpgrade php74-develUpgrade php74-sqliteUpgrade php8-exifUpgrade php8-zipUpgrade php74-bcmathUpgrade php7-readlineUpgrade php8-sodiumUpgrade php7-shmopUpgrade php74-mbstringUpgrade php74-sodiumUpgrade php7-fileinfoUpgrade php8-ldapUpgrade php7-calendarUpgrade php8-shmopUpgrade php74-dbaUpgrade php7-gmpUpgrade php74-ftpUpgrade php8-posixUpgrade php7-domUpgrade php8-pharUpgrade php8-opensslUpgrade php74Upgrade php7-xmlrpcUpgrade php8-tokenizerUpgrade php74-calendarUpgrade php7-curlUpgrade apache2-mod_php74Upgrade php8-dbaUpgrade php7-sysvmsgUpgrade php7-jsonUpgrade php8-iconvUpgrade php8-fileinfoUpgrade php74-gettextUpgrade php7-sodiumUpgrade php7-pgsqlUpgrade php7-gettextUpgrade php8-zlibUpgrade php7-intlUpgrade php7-opensslUpgrade php7-posixUpgrade php7Upgrade php7-fpmUpgrade php8-xslUpgrade php8-odbcUpgrade php74-xmlrpcUpgrade php74-sysvsemUpgrade php8-ftpUpgrade php8-sysvmsgUpgrade php7-cliUpgrade php8-mysqlUpgrade php8-fastcgiUpgrade php8-develUpgrade php74-soapUpgrade php74-opensslUpgrade php74-pgsqlUpgrade php8-xmlreaderUpgrade php74-readlineUpgrade php74-bz2Upgrade php74-exifUpgrade php74-domUpgrade php74-ctypeUpgrade php7-xslUpgrade php7-soapUpgrade php7-iconvUpgrade php7-exifUpgrade php74-opcacheUpgrade php8-xmlwriterUpgrade php74-snmpUpgrade php7-xmlreaderUpgrade php8-tidyUpgrade php74-gmpUpgrade php7-mbstringUpgrade php74-ldapUpgrade php8-pcntlUpgrade php8-cliUpgrade php74-sysvmsgUpgrade php74-mysqlUpgrade php74-jsonUpgrade php8-soapUpgrade php8-snmpUpgrade php7-gdUpgrade php74-zlibUpgrade php74-xmlwriterUpgrade php74-xmlreaderUpgrade php7-ftpUpgrade php7-firebirdUpgrade php7-bz2Upgrade php8-mbstringUpgrade apache2-mod_php7Upgrade php74-pharUpgrade php74-zipUpgrade php8-fpmUpgrade php74-xslUpgrade php7-xmlwriterUpgrade php7-pdoUpgrade php7-tidyUpgrade php7-pcntlUpgrade php7-embed | Feb 23, 2023 | Feb 16, 2023 |
| Ubuntu | — | Upgrade libapache2-mod-php8.1Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.2-cgiUpgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php8.1-cliUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.4-cliUpgrade php8.1Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.4-fpmUpgrade php7.0 (Ubuntu Pro)Upgrade php8.1-fpmUpgrade php7.0-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php8.1-cgiUpgrade php7.4Upgrade php7.2-fpmUpgrade php7.2-cliUpgrade php7.4-cgiUpgrade php7.0-zip (Ubuntu Pro)Upgrade php7.2 | Mar 22, 2023 | Feb 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub