In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service.
CVSS Details
- CVSS 4.0 Base Score: 2.9 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:Amber)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pdoUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-develUpgrade php-pearUpgrade php-bcmathUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-dbgUpgrade php-ldapUpgrade php-jsonUpgrade php-fpmUpgrade php-pecl-xdebug3Upgrade php-commonUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-gmpUpgrade phpUpgrade libzipUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-pecl-redis6Upgrade apcu-panelUpgrade php-mysqlndUpgrade php-mbstringUpgrade libzip-develUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-opcacheUpgrade php-ffiUpgrade php-processUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-intlUpgrade libzip-toolsUpgrade php-soapUpgrade php-cliUpgrade php-gd | Jun 1, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade php82Upgrade php83Upgrade php85Upgrade php84Upgrade php81 | May 15, 2026 | May 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade php-xmlUpgrade php-fpmUpgrade php-odbcUpgrade php-commonUpgrade php-pgsqlUpgrade php-develUpgrade php-cliUpgrade php-intlUpgrade php-ldapUpgrade php-dbgUpgrade php-sodiumUpgrade php-snmpUpgrade php-debuginfoUpgrade php-dbaUpgrade php-pspellUpgrade php-mbstringUpgrade php-enchantUpgrade php-gdUpgrade php-pdoUpgrade php-mysqlndUpgrade php-processUpgrade php-gmpUpgrade php-embeddedUpgrade php-bcmathUpgrade php-opcacheUpgrade phpUpgrade php-soap | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.4-intl-debuginfoUpgrade php8.4-sodiumUpgrade php8.3-ldap-debuginfoUpgrade php8.2-processUpgrade php8.2-process-debuginfoUpgrade php8.3-dbaUpgrade php8.4-dbg-debuginfoUpgrade php8.3-debugsourceUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.5-dbg-debuginfoUpgrade php8.5-develUpgrade php8.2-debuginfoUpgrade php8.3-cliUpgrade php8.3-pdo-debuginfoUpgrade php8.3-zipUpgrade php8.4-embedded-debuginfoUpgrade php8.4-opcacheUpgrade php8.4-pdoUpgrade php8.4-process-debuginfoUpgrade php8.3-enchant-debuginfoUpgrade php8.3-fpm-debuginfoUpgrade php8.4-fpmUpgrade php8.4-modphpUpgrade php8.4-sodium-debuginfoUpgrade php8.5-embedded-debuginfoUpgrade php8.5-gd-debuginfoUpgrade php8.5-gmpUpgrade php8.5-sodiumUpgrade php8.2-fpmUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-soapUpgrade php8.3-fpmUpgrade php8.3-snmpUpgrade php8.4-enchantUpgrade php8.4-ldap-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.4-mbstringUpgrade php8.5-fpmUpgrade php8.3-embedded-debuginfoUpgrade php8.3-gmp-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.4-tidyUpgrade php8.5-bcmathUpgrade php8.5-mysqlndUpgrade php8.5-soap-debuginfoUpgrade php8.2-cli-debuginfoUpgrade php8.2-common-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.2-gdUpgrade php8.5-bcmath-debuginfoUpgrade php8.5-embeddedUpgrade php8.5-enchant-debuginfoUpgrade php8.5-snmpUpgrade php8.3-xml-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.5-cli-debuginfoUpgrade php8.2-dbgUpgrade php8.3-mbstringUpgrade php8.4-soap-debuginfoUpgrade php8.4-embeddedUpgrade php8.5-tidy-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.2-pgsqlUpgrade php8.3-embeddedUpgrade php8.4-pgsql-debuginfoUpgrade php8.5-common-debuginfoUpgrade php8.5-ldapUpgrade php8.5-mbstring-debuginfoUpgrade php8.4-intlUpgrade php8.5-pgsqlUpgrade php8.4-odbc-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.3-debuginfoUpgrade php8.3-intlUpgrade php8.3-processUpgrade php8.3-tidy-debuginfoUpgrade php8.4Upgrade php8.4-common-debuginfoUpgrade php8.4-soapUpgrade php8.3-dbg-debuginfoUpgrade php8.3-ffi-debuginfoUpgrade php8.3-opcache-debuginfoUpgrade php8.5-ldap-debuginfoUpgrade php8.5-odbc-debuginfoUpgrade php8.5-pdoUpgrade php8.2-gmp-debuginfoUpgrade php8.4-mysqlndUpgrade php8.5-sodium-debuginfoUpgrade php8.2-bcmathUpgrade php8.2-embeddedUpgrade php8.2-enchantUpgrade php8.2-mbstringUpgrade php8.2-opcacheUpgrade php8.2-pdoUpgrade php8.3-gmpUpgrade php8.3-intl-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.4-cliUpgrade php8.4-ffiUpgrade php8.5-pgsql-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.3-pspellUpgrade php8.2-develUpgrade php8.5-xml-debuginfoUpgrade php8.5-gdUpgrade php8.3-pgsqlUpgrade php8.3-ldapUpgrade php8.3-dba-debuginfoUpgrade php8.4-dbaUpgrade php8.2-cliUpgrade php8.2-gd-debuginfoUpgrade php8.5-enchantUpgrade php8.2-intlUpgrade php8.4-modphp-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.3-bcmath-debuginfoUpgrade php8.2-xml-debuginfoUpgrade php8.5-cliUpgrade php8.2-commonUpgrade php8.2Upgrade php8.3-process-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.5-fpm-debuginfoUpgrade php8.3-gdUpgrade php8.3-enchantUpgrade php8.3-dbgUpgrade php8.2-xmlUpgrade php8.2-pspellUpgrade php8.2-odbc-debuginfoUpgrade php8.2-odbcUpgrade php8.2-ldapUpgrade php8.5-soapUpgrade php8.5-snmp-debuginfoUpgrade php8.5-pdo-debuginfoUpgrade php8.5-mbstringUpgrade php8.5-commonUpgrade php8.4-snmp-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-gmpUpgrade php8.3-soapUpgrade php8.3-opcacheUpgrade php8.3-odbc-debuginfoUpgrade php8.3-mysqlndUpgrade php8.5-tidyUpgrade php8.2-pdo-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.5-zipUpgrade php8.5-process-debuginfoUpgrade php8.4-xmlUpgrade php8.4-tidy-debuginfoUpgrade php8.3-zip-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php8.4-develUpgrade php8.3-snmp-debuginfoUpgrade php8.3-odbcUpgrade php8.2-zipUpgrade php8.2-tidyUpgrade php8.2-sodium-debuginfoUpgrade php8.2-sodiumUpgrade php8.2-ffi-debuginfoUpgrade php8.3-xmlUpgrade php8.4-dba-debuginfoUpgrade php8.5-dbgUpgrade php8.5-odbcUpgrade php8.5-dbaUpgrade php8.4-xml-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.2-ffiUpgrade php8.5-xmlUpgrade php8.3-modphpUpgrade php8.3-sodiumUpgrade php8.3-modphp-debuginfoUpgrade php8.3-gd-debuginfoUpgrade php8.2-zip-debuginfoUpgrade php8.2-pspell-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.3-tidyUpgrade php8.2-dbaUpgrade php8.5-processUpgrade php8.5-gmp-debuginfoUpgrade php8.5-ffi-debuginfoUpgrade php8.3-sodium-debuginfoUpgrade php8.3-develUpgrade php8.2-pgsql-debuginfoUpgrade php8.5-dba-debuginfoUpgrade php8.5Upgrade php8.4-odbcUpgrade php8.4-fpm-debuginfoUpgrade php8.4-dbgUpgrade php8.5-debugsourceUpgrade php8.5-intlUpgrade php8.3-cli-debuginfoUpgrade php8.3-bcmathUpgrade php8.5-intl-debuginfoUpgrade php8.2-debugsourceUpgrade php8.5-mysqlnd-debuginfoUpgrade php8.5-modphpUpgrade php8.4-zipUpgrade php8.4-ldapUpgrade php8.4-commonUpgrade php8.3-pdoUpgrade php8.2-snmpUpgrade php8.5-ffiUpgrade php8.5-zip-debuginfoUpgrade php8.5-modphp-debuginfoUpgrade php8.4-zip-debuginfoUpgrade php8.4-pdo-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-ffi-debuginfoUpgrade php8.4-bcmathUpgrade php8.3-soap-debuginfoUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-ffiUpgrade php8.3-commonUpgrade php8.3Upgrade php8.2-mysqlndUpgrade php8.2-intl-debuginfoUpgrade php8.2-gmpUpgrade php8.5-debuginfoUpgrade php8.4-snmpUpgrade php8.4-processUpgrade php8.4-gdUpgrade php8.4-debugsourceUpgrade php8.4-debuginfo | May 28, 2026 | May 10, 2026 |
| Debian | — | Upgrade php7.4Upgrade php8.4Upgrade php8.2 | May 10, 2026 | May 10, 2026 |
| Oracle_linux | — | Upgrade php-gdUpgrade php-enchantUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-develUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-cliUpgrade php-pearUpgrade php-fpmUpgrade php-pecl-xdebug3Upgrade php-gmpUpgrade php-processUpgrade libzip-toolsUpgrade php-pdoUpgrade phpUpgrade php-opcacheUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-ffiUpgrade php-embeddedUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-commonUpgrade php-pgsqlUpgrade php-odbcUpgrade php-soapUpgrade libzipUpgrade apcu-panelUpgrade php-ldapUpgrade libzip-devel | Jun 4, 2026 | May 10, 2026 |
| Redhat_linux | — | Upgrade php-develUpgrade php8.4-dba-debuginfoUpgrade apcu-panelUpgrade php-embedded-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade libzipUpgrade php8.4-snmpUpgrade php8.4-embeddedUpgrade php-opcacheUpgrade php-pdo-debuginfoUpgrade php8.4-gdUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php8.4-cliUpgrade php-pecl-zipUpgrade php-odbc-debuginfoUpgrade php8.4-ffiUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php8.4-dbg-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php-json-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade phpUpgrade php8.4-fpmUpgrade php8.4-intlUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade php-gmp-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmathUpgrade php8.4-soapUpgrade php-fpmUpgrade php8.4-common-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-debugsourceUpgrade php-debugsourceUpgrade php-pecl-redis6Upgrade php-soapUpgrade php-pecl-xdebug-debuginfoUpgrade php-ffi-debuginfoUpgrade libzip-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php-enchantUpgrade php8.4-debugsourceUpgrade php8.4-gd-debuginfoUpgrade php8.4-xmlUpgrade php-pecl-rrd-debugsourceUpgrade php-ldapUpgrade php-pecl-xdebug3Upgrade php-jsonUpgrade php8.4-ldapUpgrade php8.4-odbcUpgrade php-pecl-rrdUpgrade php8.4-pdoUpgrade php8.4-develUpgrade php8.4-dbaUpgrade php-cliUpgrade php8.4-debuginfoUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-mysqlndUpgrade php-pgsqlUpgrade php8.4-gmpUpgrade php-commonUpgrade php8.4-mbstringUpgrade php8.4-mysqlndUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-ffi-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpcUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php8.4-commonUpgrade php8.4-pdo-debuginfoUpgrade php-intl-debuginfoUpgrade php8.4-opcacheUpgrade libzip-develUpgrade libzip-toolsUpgrade php8.4-soap-debuginfoUpgrade php-process-debuginfoUpgrade php8.4-processUpgrade php8.4-bcmathUpgrade php8.4-xml-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pgsql-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php-mbstringUpgrade php-pecl-redis6-debugsourceUpgrade php-common-debuginfoUpgrade php-ffiUpgrade php8.4-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-debuginfoUpgrade php8.4-enchantUpgrade php8.4Upgrade php8.4-odbc-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.4-dbgUpgrade php-dbaUpgrade php8.4-process-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-enchant-debuginfo | Jun 3, 2026 | May 10, 2026 |
| Rocky_linux | — | Upgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-common-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php8.4-pgsqlUpgrade php-intl-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php8.4-pdoUpgrade php8.4-enchantUpgrade php8.4-enchant-debuginfoUpgrade php8.4-gmpUpgrade php-bcmath-debuginfoUpgrade phpUpgrade php-soap-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbg-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mysqlndUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.4-ffi-debuginfoUpgrade php8.4Upgrade php-opcacheUpgrade php8.4-process-debuginfoUpgrade php8.4-mysqlndUpgrade php-cliUpgrade php-mbstringUpgrade php-ffiUpgrade libzip-develUpgrade php8.4-soap-debuginfoUpgrade php-dba-debuginfoUpgrade php8.4-debuginfoUpgrade php-processUpgrade php-pecl-rrdUpgrade php-debuginfoUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php8.4-opcacheUpgrade libzip-debugsourceUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.4-develUpgrade php8.4-dbgUpgrade php8.4-gmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pecl-redis6-debuginfoUpgrade php8.4-mbstringUpgrade php8.4-common-debuginfoUpgrade php-process-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php-dbaUpgrade libzip-toolsUpgrade php8.4-embeddedUpgrade php8.4-intlUpgrade php8.4-processUpgrade php-enchant-debuginfoUpgrade libzip-tools-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php8.4-debugsourceUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php8.4-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-embedded-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.4-odbcUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade libzipUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php8.4-commonUpgrade php-pdoUpgrade php8.4-soapUpgrade php-gmp-debuginfoUpgrade php-enchantUpgrade php-dbgUpgrade php8.4-ldapUpgrade php8.4-fpmUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gdUpgrade php8.4-snmpUpgrade php8.4-opcache-debuginfoUpgrade php8.4-gdUpgrade php8.4-ffiUpgrade php8.4-cliUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-ffi-debuginfoUpgrade php8.4-xmlUpgrade php8.4-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade php-odbc-debuginfoUpgrade php8.4-bcmathUpgrade php8.4-dbaUpgrade php8.4-dba-debuginfoUpgrade php-develUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-fpmUpgrade php-odbcUpgrade php-soapUpgrade php-pgsql | Jun 2, 2026 | Jun 1, 2026 |
| Ubuntu | — | Upgrade php7.0-common (Ubuntu Pro)Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.0-phpdbg (Ubuntu Pro)Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade libphp7.0-embed (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.1Upgrade php8.4Upgrade php7.0-pgsql (Ubuntu Pro)Upgrade php8.5Upgrade php7.0-soap (Ubuntu Pro)Upgrade php8.3 | May 28, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub