In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce.
CVSS Details
- CVSS 3.1 Base Score: 2.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-xmlrpcUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-mysqlndUpgrade php-commonUpgrade php-opcacheUpgrade php-cliUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-snmpUpgrade php-processUpgrade php-ffiUpgrade php-dbaUpgrade php-intlUpgrade php-mbstringUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade phpUpgrade php-pearUpgrade php-embeddedUpgrade php-enchantUpgrade php-ldapUpgrade php-odbcUpgrade php-bcmathUpgrade php-soapUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pecl-xdebug3Upgrade php-pecl-zipUpgrade libzipUpgrade php-xmlUpgrade php-develUpgrade php-pdoUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-fpm | Oct 23, 2023 | Jul 22, 2023 |
| Alpine Linux | — | Upgrade php81Upgrade php8 | Aug 22, 2024 | Jul 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-snmpUpgrade php-bcmathUpgrade php-pdoUpgrade php-gmpUpgrade php-xmlUpgrade php-dbgUpgrade php-mysqlndUpgrade php-fpmUpgrade php-opcacheUpgrade php-odbcUpgrade php-develUpgrade php-cliUpgrade php-commonUpgrade php-ldapUpgrade php-processUpgrade phpUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-intlUpgrade php-embeddedUpgrade php-sodiumUpgrade php-gdUpgrade php-debuginfoUpgrade php-pspellUpgrade php-enchantUpgrade php-dbaUpgrade php-soap | Sep 14, 2023 | Jul 22, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.1-commonUpgrade php8.1-ldapUpgrade php8.1-gmpUpgrade php8.1-gdUpgrade php8.1-fpmUpgrade php8.1-embedded-debuginfoUpgrade php8.1-ffiUpgrade php8.1-dba-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-bcmathUpgrade php8.1-tidyUpgrade php8.1-common-debuginfoUpgrade php8.1-snmpUpgrade php8.1-pgsqlUpgrade php8.1-odbc-debuginfoUpgrade php8.1-snmp-debuginfoUpgrade php8.1-process-debuginfoUpgrade php8.1-xmlUpgrade php8.1-xml-debuginfoUpgrade php8.1-ldap-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-pspell-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-dbaUpgrade php8.1-soapUpgrade php8.1-mysqlndUpgrade php8.1-tidy-debuginfoUpgrade php8.1-processUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-develUpgrade php8.1-mbstringUpgrade php8.1-gd-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-odbcUpgrade php8.1-opcacheUpgrade php8.1-debuginfoUpgrade php8.1-dbgUpgrade php8.1-enchantUpgrade php8.1-embeddedUpgrade php8.1-cli-debuginfoUpgrade php8.1-cliUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-intlUpgrade php8.1-bcmath-debuginfoUpgrade php8.1Upgrade php8.1-pdoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-pspellUpgrade php8.1-pdo-debuginfoUpgrade php8.1-fpm-debuginfo | Feb 17, 2025 | Jul 3, 2023 |
| Centos_linux | — | Upgrade libzip-toolsUpgrade php-commonUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug3Upgrade php-debuginfoUpgrade php-snmp-debuginfoUpgrade php-odbcUpgrade php-xml-debuginfoUpgrade php-pearUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade php-dba-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade php-processUpgrade libzip-debuginfoUpgrade libzipUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-ldapUpgrade php-ffiUpgrade php-intlUpgrade php-ffi-debuginfoUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-process-debuginfoUpgrade php-pdoUpgrade phpUpgrade libzip-develUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade php-develUpgrade php-pgsql-debuginfoUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcuUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlUpgrade php-pecl-xdebug3-debugsourceUpgrade php-snmpUpgrade libzip-tools-debuginfoUpgrade php-opcacheUpgrade php-fpm-debuginfoUpgrade php-debugsource | Nov 1, 2023 | Jul 22, 2023 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Jun 16, 2023 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pdoUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-cliUpgrade php-soapUpgrade php-recodeUpgrade phpUpgrade php-gdUpgrade php-processUpgrade php-fpmUpgrade php-odbcUpgrade php-commonUpgrade php-ldap | Jan 10, 2024 | Jul 22, 2023 |
| Oracle_linux | — | Upgrade libzipUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-cliUpgrade php-snmpUpgrade libzip-develUpgrade php-xmlUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-pecl-xdebug3Upgrade php-soapUpgrade php-jsonUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-processUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-gdUpgrade php-pearUpgrade php-commonUpgrade php-develUpgrade php-pdoUpgrade php-intlUpgrade php-pgsqlUpgrade phpUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-ffiUpgrade php-ldapUpgrade php-bcmathUpgrade php-dbgUpgrade php-fpmUpgrade apcu-panel | Oct 23, 2023 | Jul 3, 2023 |
| Php | — | Upgrade to PHP version 8.0.29Upgrade to PHP version 8.1.20Upgrade to PHP version 8.2.7 | Aug 11, 2023 | Jul 22, 2023 |
| Redhat_linux | — | Upgrade php-mbstring-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-gmpUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade php-pgsqlUpgrade phpUpgrade php-pecl-xdebug-debuginfoUpgrade php-ffi-debuginfoUpgrade php-intlUpgrade php-commonNo solution existsUpgrade php-ffiUpgrade php-process-debuginfoUpgrade php-json-debuginfoUpgrade php-bcmathUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-jsonUpgrade libzip-debuginfoUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-embeddedUpgrade php-pecl-xdebug3-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-enchantUpgrade libzipUpgrade php-pecl-rrd-debugsourceUpgrade php-soapUpgrade php-gdUpgrade php-fpmUpgrade php-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebug3Upgrade php-ldap-debuginfoUpgrade php-snmpUpgrade php-mysqlndUpgrade php-mysqlnd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-xmlUpgrade php-debugsourceUpgrade php-processUpgrade php-pearUpgrade libzip-debugsourceUpgrade php-develUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade php-pecl-rrdUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-cliUpgrade php-xmlrpcUpgrade libzip-devel | Nov 1, 2023 | Jul 22, 2023 |
| Rocky_linux | — | Upgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-bcmath-debuginfoUpgrade phpUpgrade php-pecl-xdebug3-debugsourceUpgrade php-dbgUpgrade php-pgsqlUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-json-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-jsonUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-commonUpgrade php-bcmathUpgrade php-soap-debuginfoUpgrade php-soapUpgrade php-common-debuginfoUpgrade php-odbcUpgrade php-ffi-debuginfoUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-pecl-xdebug3-debuginfoUpgrade php-dba-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gmpUpgrade php-develUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebug3Upgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gdUpgrade php-mbstringUpgrade php-processUpgrade php-intl-debuginfoUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-rrdUpgrade php-snmpUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcache-debuginfoUpgrade php-opcacheUpgrade php-mysqlnd-debuginfoUpgrade php-mysqlndUpgrade php-gd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-cliUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-xmlUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-ffi | Mar 5, 2024 | Jul 22, 2023 |
| Suse | — | Upgrade php7-cliUpgrade php7-jsonUpgrade php7-bcmathUpgrade php8-develUpgrade php8-pharUpgrade php7-develUpgrade php7-soapUpgrade php8-sysvsemUpgrade php8-odbcUpgrade php8-mysqlUpgrade php8Upgrade php74-sysvsemUpgrade php8-gettextUpgrade php74-ftpUpgrade php74-mbstringUpgrade php7-bz2Upgrade php8-bz2Upgrade php74-xmlreaderUpgrade php7-domUpgrade php74-ctypeUpgrade php74-pdoUpgrade php7-readlineUpgrade php7-opensslUpgrade php7-mysqlUpgrade php8-xmlwriterUpgrade php7-sqliteUpgrade php74-domUpgrade php74-fastcgiUpgrade php7-mbstringUpgrade php7-shmopUpgrade php74Upgrade php74-iconvUpgrade php74-readlineUpgrade php74-sodiumUpgrade php8-ctypeUpgrade php74-mysqlUpgrade php8-mbstringUpgrade apache2-mod_php7Upgrade php8-readlineUpgrade php7-tidyUpgrade php7-socketsUpgrade php8-fpmUpgrade php7-fpmUpgrade php8-pdoUpgrade php8-curlUpgrade php8-pgsqlUpgrade php7-posixUpgrade php7-sysvmsgUpgrade php7-sysvshmUpgrade php74-opensslUpgrade php8-intlUpgrade php74-sqliteUpgrade php7-xmlrpcUpgrade php74-pharUpgrade php7Upgrade php7-ldapUpgrade php8-shmopUpgrade php8-fileinfoUpgrade php74-dbaUpgrade php7-odbcUpgrade php74-intlUpgrade php8-enchantUpgrade php74-xmlrpcUpgrade php7-zlibUpgrade php74-fileinfoUpgrade php74-bcmathUpgrade php74-exifUpgrade php7-gettextUpgrade php7-pharUpgrade php8-domUpgrade php74-ldapUpgrade php7-dbaUpgrade php8-soapUpgrade apache2-mod_php8Upgrade php7-xslUpgrade php74-xmlwriterUpgrade php74-posixUpgrade php74-opcacheUpgrade php74-pgsqlUpgrade php7-zipUpgrade php8-posixUpgrade php8-iconvUpgrade php8-opcacheUpgrade php74-jsonUpgrade php7-exifUpgrade php8-bcmathUpgrade php8-gdUpgrade php7-ftpUpgrade php8-fastcgiUpgrade php74-pcntlUpgrade php74-gdUpgrade php74-develUpgrade php7-pgsqlUpgrade php7-pdoUpgrade php7-gdUpgrade php74-sysvmsgUpgrade php8-pcntlUpgrade php8-opensslUpgrade php8-ftpUpgrade php74-zlibUpgrade php74-xslUpgrade php74-sysvshmUpgrade php74-soapUpgrade php74-snmpUpgrade php74-odbcUpgrade php74-gmpUpgrade php8-zipUpgrade php8-tokenizerUpgrade php8-sqliteUpgrade php8-socketsUpgrade php8-snmpUpgrade php8-xmlreaderUpgrade php8-testUpgrade php7-firebirdUpgrade php8-cliUpgrade php8-exifUpgrade php8-embedUpgrade php7-snmpUpgrade php74-curlUpgrade php7-xmlwriterUpgrade php7-fastcgiUpgrade php8-xslUpgrade php8-gmpUpgrade php74-tokenizerUpgrade php74-tidyUpgrade php7-opcacheUpgrade php74-fpmUpgrade php74-zipUpgrade php74-socketsUpgrade php7-embedUpgrade php7-sysvsemUpgrade apache2-mod_php74Upgrade php7-sodiumUpgrade php8-sysvmsgUpgrade php8-calendarUpgrade php7-pcntlUpgrade php7-gmpUpgrade php7-enchantUpgrade php7-calendarUpgrade php74-gettextUpgrade php74-calendarUpgrade php74-shmopUpgrade php7-ctypeUpgrade php8-zlibUpgrade php7-xmlreaderUpgrade php7-tokenizerUpgrade php7-iconvUpgrade php7-fileinfoUpgrade php8-tidyUpgrade php8-sodiumUpgrade php8-dbaUpgrade php7-intlUpgrade php74-enchantUpgrade php7-curlUpgrade php8-ldapUpgrade php74-bz2Upgrade php8-sysvshmUpgrade php7-test | Jun 23, 2023 | Jun 22, 2023 |
| Ubuntu | — | Upgrade libapache2-mod-php7.2 (Ubuntu Pro)Upgrade php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php8.1Upgrade php8.1-soapUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php8.0Upgrade php7.4-cliUpgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.1-cliUpgrade php7.0-cli (Ubuntu Pro)Upgrade php8.1-sqlite3Upgrade php8.1Upgrade php7.4-cgiUpgrade php7.0-soap (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.4-soapUpgrade php7.2-soap (Ubuntu Pro)Upgrade php7.2 (Ubuntu Pro)Upgrade php8.1-cgiUpgrade php7.4Upgrade php7.2-cgi (Ubuntu Pro)Upgrade php7.2-cli (Ubuntu Pro) | Jul 4, 2023 | Jul 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub