The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php-imapUpgrade php-cliUpgrade php-intlUpgrade php-gdUpgrade php-ldapUpgrade php-pspellUpgrade php-recodeUpgrade php-xmlUpgrade php-enchantUpgrade php-bcmathUpgrade php-tidyUpgrade phpUpgrade php-snmpUpgrade php-dbaUpgrade php-embeddedUpgrade php-ncursesUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-soapUpgrade php-odbcUpgrade php-fpmUpgrade php-pdoUpgrade php-commonUpgrade php-mbstringUpgrade php-processUpgrade php-mysqlUpgrade php-develUpgrade php-zts | Dec 1, 2016 | Aug 30, 2012 |
| Freebsd | — | Upgrade php53Upgrade php5Upgrade php52 | Dec 10, 2025 | Sep 5, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Aug 30, 2012 |
| Oracle_linux | — | Upgrade php53-pspellUpgrade php-recodeUpgrade php53-mysqlUpgrade php-xmlUpgrade php53-xmlUpgrade php-mysqlUpgrade php-mbstringUpgrade php-pspellUpgrade php53-develUpgrade php53-xmlrpcUpgrade php-snmpUpgrade php-cliUpgrade php-gdUpgrade php-soapUpgrade php-xmlrpcUpgrade php-processUpgrade php53-processUpgrade php53-intlUpgrade php53-ldapUpgrade php53-commonUpgrade php-dbaUpgrade php53-cliUpgrade php53-soapUpgrade php53-pgsqlUpgrade php-commonUpgrade php53-imapUpgrade php-fpmUpgrade php-odbcUpgrade php-ztsUpgrade php53-odbcUpgrade php53-bcmathUpgrade php-tidyUpgrade phpUpgrade php-bcmathUpgrade php-develUpgrade php-ldapUpgrade php-imapUpgrade php-pdoUpgrade php-ncursesUpgrade php-enchantUpgrade php53Upgrade php53-pdoUpgrade php-intlUpgrade php53-mbstringUpgrade php53-dbaUpgrade php-embeddedUpgrade php53-gdUpgrade php53-snmpUpgrade php-pgsql | Oct 16, 2024 | Aug 30, 2012 |
| Php | — | Upgrade to PHP version 5.4.0Upgrade to PHP version 5.3.11 | Oct 1, 2012 | Aug 30, 2012 |
| Suse | — | Upgrade php53-gettextUpgrade php53-suhosinUpgrade php5-xmlwriterUpgrade php53-intlUpgrade php53-bcmathUpgrade php5-imapUpgrade php5-jsonUpgrade php5-pspellUpgrade php53-gmpUpgrade php5-hashUpgrade php53-pgsqlUpgrade php53-tidyUpgrade php5-sysvshmUpgrade php53-curlUpgrade php53-wddxUpgrade php5-zipUpgrade php5-readlineUpgrade php5-posixUpgrade php5-mysqlUpgrade php5-develUpgrade php5-pgsqlUpgrade php53-jsonUpgrade php53-mbstringUpgrade php5-gdUpgrade php5-calendarUpgrade php5-sysvsemUpgrade php5-wddxUpgrade php5-pdoUpgrade php53-mysqlUpgrade php53-fastcgiUpgrade php5-pcntlUpgrade php5Upgrade php5-dbaUpgrade php53-ldapUpgrade php5-suhosinUpgrade php53-ftpUpgrade php53-pspellUpgrade php53-xmlrpcUpgrade php53-bz2Upgrade php53-mcryptUpgrade php53-pearUpgrade apache2-mod_php5Upgrade php53-sysvmsgUpgrade php53-dbaUpgrade php5-tokenizerUpgrade php53-domUpgrade php5-gettextUpgrade php53-develUpgrade php5-bcmathUpgrade apache2-mod_php53Upgrade php53-sysvshmUpgrade php53-pdoUpgrade php5-zlibUpgrade php5-soapUpgrade php5-bz2Upgrade php53-xmlwriterUpgrade php53-odbcUpgrade php53-ctypeUpgrade php5-sysvmsgUpgrade php53-xmlreaderUpgrade php5-fastcgiUpgrade php53-tokenizerUpgrade php53-opensslUpgrade php5-xslUpgrade php53-gdUpgrade php53-exifUpgrade php5-pearUpgrade php53-socketsUpgrade php5-mbstringUpgrade php53-zipUpgrade php5-ncursesUpgrade php5-odbcUpgrade php5-ftpUpgrade php53-posixUpgrade php5-ctypeUpgrade php53-readlineUpgrade php5-socketsUpgrade php5-mcryptUpgrade php53Upgrade php5-opensslUpgrade php53-fileinfoUpgrade php53-pcntlUpgrade php53-calendarUpgrade php53-soapUpgrade php53-snmpUpgrade php5-curlUpgrade php53-xslUpgrade php5-shmopUpgrade php5-ldapUpgrade php53-sysvsemUpgrade php5-exifUpgrade php53-iconvUpgrade php5-xmlreaderUpgrade php53-shmopUpgrade php5-dbaseUpgrade php5-gmpUpgrade php5-domUpgrade php5-snmpUpgrade php5-iconvUpgrade php53-sqliteUpgrade php53-zlibUpgrade php5-tidyUpgrade php5-xmlrpcUpgrade php53-imapUpgrade php5-sqlite | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5 | Nov 8, 2024 | Aug 30, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub