When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-enchantUpgrade php-develUpgrade php-bcmathUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-gdUpgrade php-recodeUpgrade php-soapUpgrade php-ldapUpgrade php-fpmUpgrade php-jsonUpgrade php-pecl-apcuUpgrade libzipUpgrade php-pgsqlUpgrade php-pecl-xdebugUpgrade php-dbaUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-embeddedUpgrade phpUpgrade php-mysqlndUpgrade php-intlUpgrade php-xmlUpgrade php-snmpUpgrade php-commonUpgrade libzip-develUpgrade php-cliUpgrade apcu-panelUpgrade php-processUpgrade php-opcacheUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-odbcUpgrade php-pecl-rrd | May 4, 2022 | Feb 10, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 10, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Mar 2, 2020 | Feb 10, 2020 |
| Centos_linux | — | Upgrade php-bcmathUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-mysqlndUpgrade php-ldapUpgrade php-xmlUpgrade php-develUpgrade php-common-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebugUpgrade php-opcacheUpgrade php-pecl-xdebug-debugsourceUpgrade php-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-recodeUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-debuginfoUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debugsourceUpgrade php-soap-debuginfoUpgrade php-dbgUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-cliUpgrade php-snmpUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-mbstringUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-intlUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-pecl-zipUpgrade php-process-debuginfoUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-embeddedUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-pecl-apcu-debuginfoUpgrade php-dbaUpgrade phpUpgrade php-gmpUpgrade php-processUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-pgsqlUpgrade php-opcache-debuginfoUpgrade php-gd-debuginfoUpgrade php-debugsource | Sep 9, 2020 | Feb 10, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2020 | Feb 10, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-gdUpgrade php-processUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-soapUpgrade php-cliUpgrade php-ldapUpgrade php-xmlUpgrade php-pdoUpgrade phpUpgrade php-commonUpgrade php-odbcUpgrade php-pgsql | Nov 3, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-recodeUpgrade php-xmlUpgrade php-mysqlUpgrade php-cliUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-gdUpgrade php-ldapUpgrade phpUpgrade php-odbcUpgrade php-commonUpgrade php-processUpgrade php-soapUpgrade php-pgsql | Sep 28, 2020 | Feb 10, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade phpUpgrade php-gdUpgrade php-ldapUpgrade php-cliUpgrade php-odbcUpgrade php-recodeUpgrade php-pdoUpgrade php-fpmUpgrade php-processUpgrade php-soapUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-common | Jul 31, 2020 | Feb 10, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Feb 10, 2020 |
| Oracle_linux | — | Upgrade libzip-develUpgrade php-recodeUpgrade php-snmpUpgrade php-dbaUpgrade libzipUpgrade php-enchantUpgrade libzip-toolsUpgrade phpUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-cliUpgrade php-dbgUpgrade php-intlUpgrade php-ldapUpgrade php-odbcUpgrade php-embeddedUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-mbstringUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-soapUpgrade php-gdUpgrade php-fpmUpgrade php-pgsqlUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-processUpgrade php-gmpUpgrade php-bcmathUpgrade php-jsonUpgrade php-xmlrpc | Sep 10, 2020 | Jan 23, 2020 |
| Php | — | Upgrade to PHP version 7.2.27Upgrade to PHP version 7.4.2Upgrade to PHP version 7.3.14 | Feb 14, 2020 | Feb 10, 2020 |
| Redhat_linux | — | Upgrade php-jsonUpgrade php-xml-debuginfoUpgrade php-embeddedUpgrade php-mysqlnd-debuginfoUpgrade php-enchantUpgrade php-processUpgrade libzip-tools-debuginfoUpgrade libzip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-intl-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade libzipUpgrade php-intlUpgrade php-gmpUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade apcu-panelUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pgsqlUpgrade php-odbc-debuginfoUpgrade libzip-toolsUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-gd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade php-dbaUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade php-pecl-zipUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dbgUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade php-snmpUpgrade php-develUpgrade php-ldapUpgrade php-pearUpgrade php-mbstring-debuginfoUpgrade php-commonNo solution existsUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-bcmathUpgrade libzip-develUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-mysqlndUpgrade php-recodeUpgrade php-pecl-xdebug-debugsource | Sep 9, 2020 | Feb 10, 2020 |
| Rocky_linux | — | Upgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-cliUpgrade php-recode-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-opcacheUpgrade php-xmlUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-embeddedUpgrade php-debuginfoUpgrade php-recodeUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade php-debugsourceUpgrade php-enchantUpgrade php-dbaUpgrade php-mysqlndUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-pgsql-debuginfoUpgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-commonUpgrade phpUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-intlUpgrade php-gmpUpgrade php-xml-debuginfo | Mar 12, 2024 | Feb 10, 2020 |
| Suse | — | Upgrade php5-bcmathUpgrade php7-ftpUpgrade php72-opensslUpgrade php72-pspellUpgrade php5-zlibUpgrade php72-enchantUpgrade php7-fileinfoUpgrade php72-iconvUpgrade php5-fpmUpgrade php5-tokenizerUpgrade php5-ctypeUpgrade php5-suhosinUpgrade php5-imapUpgrade php5-xmlrpcUpgrade php5-zipUpgrade php72-soapUpgrade php7-testUpgrade apache2-mod_php72Upgrade php5-develUpgrade php7-zlibUpgrade php7-tokenizerUpgrade php7-sysvsemUpgrade php7-opensslUpgrade apache2-mod_php5Upgrade php72-gmpUpgrade php5-wddxUpgrade apache2-mod_php7Upgrade php72-opcacheUpgrade php7-bcmathUpgrade php5-gettextUpgrade php72-imapUpgrade php5-opcacheUpgrade php72-domUpgrade php5-pcntlUpgrade php7-pcntlUpgrade php7-zipUpgrade php5-gdUpgrade php7-calendarUpgrade php5-enchantUpgrade php7-iconvUpgrade php72-pharUpgrade php5-sysvshmUpgrade php7-xmlwriterUpgrade php72-fastcgiUpgrade php7-mbstringUpgrade php5-posixUpgrade php72-xmlreaderUpgrade php5-ldapUpgrade php72-dbaUpgrade php72-bz2Upgrade php7-wddxUpgrade php7-mysqlUpgrade php7-snmpUpgrade php72-tokenizerUpgrade php72-intlUpgrade php72-xslUpgrade php7-pharUpgrade php7-develUpgrade php72-zipUpgrade php72-sysvmsgUpgrade php72-readlineUpgrade php7-fastcgiUpgrade php72-develUpgrade php7-intlUpgrade php5-pspellUpgrade php5-xslUpgrade php7-sysvmsgUpgrade php7-enchantUpgrade php5-intlUpgrade php72-odbcUpgrade php5-dbaUpgrade php72-socketsUpgrade php7-pgsqlUpgrade php72-shmopUpgrade php72-pdoUpgrade php5-fileinfoUpgrade php7-odbcUpgrade php72-pearUpgrade php72-calendarUpgrade php72-ldapUpgrade php72-jsonUpgrade php7-ctypeUpgrade php7-curlUpgrade php5-pgsqlUpgrade php5-pdoUpgrade php72-gettextUpgrade php72-bcmathUpgrade php72-sodiumUpgrade php7-pearUpgrade php72-sysvsemUpgrade php7-exifUpgrade php5-socketsUpgrade php72-wddxUpgrade php7-embedUpgrade php7-sodiumUpgrade php7-xmlrpcUpgrade php72-curlUpgrade php7-dbaUpgrade php72-xmlwriterUpgrade php5-pearUpgrade php72-sqliteUpgrade php5-pharUpgrade php5-soapUpgrade php5Upgrade php5-opensslUpgrade php7-pear-archive_tarUpgrade php5-shmopUpgrade php7-sqliteUpgrade php72-pear-archive_tarUpgrade php72-tidyUpgrade php72-gdUpgrade php72-sysvshmUpgrade php7-readlineUpgrade php7-opcacheUpgrade php72-ctypeUpgrade php5-domUpgrade php5-calendarUpgrade php5-mbstringUpgrade php72-mysqlUpgrade php7-ldapUpgrade php72-ftpUpgrade php7-sysvshmUpgrade php5-curlUpgrade php5-mcryptUpgrade php5-gmpUpgrade php7-gdUpgrade php7-jsonUpgrade php7-gettextUpgrade php72Upgrade php7-xslUpgrade php7-socketsUpgrade php7-gmpUpgrade php7Upgrade php7-posixUpgrade php72-snmpUpgrade php7-firebirdUpgrade php7-fpmUpgrade php72-posixUpgrade php5-iconvUpgrade php7-bz2Upgrade php5-xmlwriterUpgrade php5-odbcUpgrade php5-ftpUpgrade php72-exifUpgrade php72-fileinfoUpgrade php5-jsonUpgrade php5-bz2Upgrade php5-sqliteUpgrade php72-fpmUpgrade php5-exifUpgrade php72-xmlrpcUpgrade php72-pcntlUpgrade php5-xmlreaderUpgrade php72-pgsqlUpgrade php72-zlibUpgrade php5-fastcgiUpgrade php7-xmlreaderUpgrade php72-mbstringUpgrade php7-soapUpgrade php5-mysqlUpgrade php7-tidyUpgrade php5-sysvmsgUpgrade php7-shmopUpgrade php7-domUpgrade php5-sysvsemUpgrade php7-pdoUpgrade php5-snmp | Feb 19, 2020 | Feb 10, 2020 |
| Ubuntu | — | Upgrade php5-fpm (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.0-cgiUpgrade libapache2-mod-php7.0Upgrade php7.2-fpmUpgrade php7.2-cliUpgrade libapache2-mod-php5Upgrade php7.0-fpmUpgrade libapache2-mod-php7.2Upgrade php7.3-cgiUpgrade libapache2-mod-php7.3Upgrade php5-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cliUpgrade php7.2-cgiUpgrade php5-fpmUpgrade php7.3-cliUpgrade php7.3-fpmUpgrade php5-cli (Ubuntu Pro) | Feb 18, 2020 | Feb 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub