The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Jun 9, 2015 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Aug 28, 2015 | Jun 9, 2015 |
| Apple Osx Apachemodphp | — | Apply OS X security update 2015-006Upgrade macOS to the latest version | Mar 29, 2016 | Jun 9, 2015 |
| Centos_linux | — | Upgrade php-soapUpgrade phpUpgrade php-processUpgrade php-dbaUpgrade php-snmpUpgrade php-odbcUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php-imapUpgrade php-gdUpgrade php-intlUpgrade php-pspellUpgrade php-tidyUpgrade php-ldapUpgrade php-mbstringUpgrade php-fpmUpgrade php-develUpgrade php-pdoUpgrade php-xmlUpgrade php-commonUpgrade php-recodeUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-cliUpgrade php-enchantUpgrade php-embeddedUpgrade php-zts | Dec 1, 2016 | Jun 9, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 22, 2015 |
| Freebsd | — | Upgrade php55Upgrade php5Upgrade php56 | Dec 10, 2025 | May 22, 2015 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jun 9, 2015 |
| Oracle Solaris | — | Upgrade web/php-56/extension/php-xdebug to version 2.3.2-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56 to version 5.6.30-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56/extension/php-suhosin-extension to version 0.9.37.1-0.175.3.22.0.2.0 on Solaris 11.3 | Jul 19, 2017 | Jun 9, 2015 |
| Oracle_linux | — | Upgrade php54-php-processUpgrade php55-php-commonUpgrade php54-php-bcmathUpgrade php-gdUpgrade php-cliUpgrade php55-php-xmlrpcUpgrade php54-php-pspellUpgrade php55-php-ldapUpgrade php-mbstringUpgrade php-recodeUpgrade php-pspellUpgrade php-xmlrpcUpgrade php55-php-gmpUpgrade php55-php-processUpgrade php-fpmUpgrade php-mysqlUpgrade php55-php-opcacheUpgrade php-embeddedUpgrade php-ztsUpgrade php54-php-gdUpgrade php55-php-pspellUpgrade php54-php-snmpUpgrade php54-php-recodeUpgrade php-develUpgrade php54-php-pgsqlUpgrade php55-php-snmpUpgrade php54-php-commonUpgrade php54-php-mysqlndUpgrade php55-php-mbstringUpgrade php55-php-cliUpgrade php-pdoUpgrade php55-php-mysqlndUpgrade php-processUpgrade php55-phpUpgrade php-snmpUpgrade php55-php-fpmUpgrade php54-php-xmlUpgrade php-xmlUpgrade php55-php-pdoUpgrade php-enchantUpgrade php55-php-develUpgrade php-mysqlndUpgrade php54-php-intlUpgrade php54-phpUpgrade php-pgsqlUpgrade php54-php-xmlrpcUpgrade php55-php-recodeUpgrade php54-php-tidyUpgrade php-odbcUpgrade php55-php-intlUpgrade phpUpgrade php-imapUpgrade php-intlUpgrade php-tidyUpgrade php55-php-odbcUpgrade php54-php-soapUpgrade php54-php-dbaUpgrade php55-php-pgsqlUpgrade php54-php-enchantUpgrade php54-php-mbstringUpgrade php54-php-fpmUpgrade php55-php-xmlUpgrade php-commonUpgrade php55-php-gdUpgrade php54-php-cliUpgrade php55-php-dbaUpgrade php54-php-ldapUpgrade php55-php-soapUpgrade php55-php-enchantUpgrade php-dbaUpgrade php54-php-pdoUpgrade php-ldapUpgrade php-soapUpgrade php-bcmathUpgrade php54-php-develUpgrade php54-php-imapUpgrade php55-php-bcmathUpgrade php54-php-odbc | Oct 16, 2024 | Jun 9, 2015 |
| Php | — | Upgrade to PHP version 5.4.41Upgrade to PHP version 5.5.25Upgrade to PHP version 5.6.9 | Jun 17, 2015 | Jun 9, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2015 |
| Suse | — | Upgrade php5-jsonUpgrade php53-sysvshmUpgrade php5-xslUpgrade php53-exifUpgrade php5-domUpgrade php53-zipUpgrade apache2-mod_php53Upgrade php53-gmpUpgrade php53-calendarUpgrade php5-snmpUpgrade php5-xmlreaderUpgrade php53Upgrade php5-pdoUpgrade php5-socketsUpgrade php53-ctypeUpgrade php5-mysqlUpgrade php5-xmlwriterUpgrade php53-imapUpgrade php53-odbcUpgrade php5-ftpUpgrade php53-curlUpgrade php5-opensslUpgrade php53-tidyUpgrade php5-exifUpgrade php5-mcryptUpgrade php53-posixUpgrade php53-pspellUpgrade php53-xmlwriterUpgrade php53-pcntlUpgrade php53-shmopUpgrade php53-fileinfoUpgrade php53-sysvsemUpgrade php53-pdoUpgrade php53-gettextUpgrade php5-mbstringUpgrade php53-xmlreaderUpgrade php5-shmopUpgrade php5-zipUpgrade php5-sysvmsgUpgrade php5-wddxUpgrade php53-iconvUpgrade php5-soapUpgrade php53-snmpUpgrade php5-calendarUpgrade php53-socketsUpgrade php5-bz2Upgrade php53-mbstringUpgrade php53-zlibUpgrade php5-iconvUpgrade php5-odbcUpgrade php53-gdUpgrade php5-gmpUpgrade php5-fastcgiUpgrade php5-sysvsemUpgrade php53-readlineUpgrade php53-suhosinUpgrade php5-gettextUpgrade php5-ldapUpgrade php53-bz2Upgrade php5-pcntlUpgrade php5Upgrade php53-fastcgiUpgrade php53-ldapUpgrade php53-intlUpgrade php53-dbaUpgrade php53-xslUpgrade php5-tokenizerUpgrade php5-bcmathUpgrade php5-sqliteUpgrade php5-curlUpgrade php53-tokenizerUpgrade php5-zlibUpgrade php53-bcmathUpgrade php5-fileinfoUpgrade php5-develUpgrade php5-fpmUpgrade apache2-mod_php5Upgrade php53-xmlrpcUpgrade php5-sysvshmUpgrade php5-ctypeUpgrade php53-jsonUpgrade php5-dbaUpgrade php53-pearUpgrade php53-soapUpgrade php5-pspellUpgrade php53-pgsqlUpgrade php5-suhosinUpgrade php53-mysqlUpgrade php53-domUpgrade php5-xmlrpcUpgrade php5-gdUpgrade php53-wddxUpgrade php5-intlUpgrade php53-opensslUpgrade php53-develUpgrade php53-ftpUpgrade php5-pgsqlUpgrade php53-sysvmsgUpgrade php5-pearUpgrade php53-mcryptUpgrade php53-sqliteUpgrade php5-enchant | Dec 18, 2015 | Jun 9, 2015 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-fpm | Nov 8, 2024 | Jun 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub