CVE-2021-21708
php: Use after free due to php_filter_float() failing for ints
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Bitnami. Niedriger laut Red Hat (hoch), AlmaLinux (mittel), Amazon (mittel), Oracle (mittel), Rocky Linux (mittel), Ubuntu (mittel).
Beschreibung
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | libphp, php, php-min | 7.4.28, 8.0.16, 8.1.3 |
| alma 8 | php:7.4::apcu-panel, php:7.4::libzip, php:7.4::libzip-devel und 69 weitere | 5.1.18-1.module_el8.6.0+2750+78feabcb und 13 weitere |
| alma 9 | php, php-bcmath, php-cli und 22 weitere | 8.0.20-3.el9 |
| alpine 3.14 | php7 | 7.4.32-r0 |
| alpine 3.15 | php7, php8 | 7.4.28-r0 und 1 weitere |
| amazon linux 2022 | php, php-bcmath, php-bcmath-debuginfo und 55 weitere | 7.4.28-1.amzn2022.0.4 und 1 weitere |
| debian 11 | php7.4 | 7.4.28-1+deb11u1 |
| echo | php-7.2 | 7.2.34+e1 |
| Oracle Linux 8 | apcu-panel, libzip, libzip-devel und 35 weitere | 5.1.20-1.module+el8.6.0+20568+84712317 und 8 weitere |
| Oracle Linux 9 | php, php-bcmath, php-cli und 22 weitere | 8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php, php-bcmath, php-cli und 22 weitere | 0:8.0.20-3.el9 |
| rocky 8 | php:7.4::apcu-panel, php:7.4::libzip, php:7.4::libzip-devel und 69 weitere | 5.1.18-1.module+el8.6.0+789+2130c178 und 12 weitere |
Alle 352 Einträge aus 17 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | libphp | 7.4.28, 8.0.16, 8.1.3 |
| bitnami::Bitnami Vulnerability Database | php | 7.4.28, 8.0.16, 8.1.3 |
| bitnami::Bitnami Vulnerability Database | php-min | 7.4.28, 8.0.16, 8.1.3 |
| alma 8 | php:7.4::apcu-panel | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::libzip | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::libzip-devel | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::libzip-tools | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-bcmath | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-cli | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-common | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-dba | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-dbg | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-devel | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-embedded | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-enchant | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-ffi | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-fpm | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-gd | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-gmp | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-intl | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-json | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-ldap | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-mbstring | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-mysqlnd | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-odbc | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-opcache | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-pdo | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-pear | 1:1.10.13-1.module_el8.6.0+3268+b150a051 |
| alma 8 | php:7.4::php-pecl-apcu | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-apcu-devel | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-rrd | 2.0.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-xdebug | 2.9.5-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-zip | 1.18.2-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pgsql | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-process | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-snmp | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-soap | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-xml | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-xmlrpc | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:8.0::apcu-panel | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::libzip | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::libzip-devel | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::libzip-tools | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-bcmath | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-cli | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-common | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-dba | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-dbg | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-devel | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-embedded | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-enchant | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-ffi | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-fpm | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-gd | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-gmp | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-intl | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-ldap | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-mbstring | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-mysqlnd | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-odbc | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-opcache | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-pdo | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-pear | 1:1.10.13-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-apcu | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-apcu-devel | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-rrd | 2.0.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-xdebug3 | 3.1.2-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-zip | 1.19.2-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pgsql | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-process | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-snmp | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-soap | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-xml | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 9 | php | 8.0.20-3.el9 |
| alma 9 | php-bcmath | 8.0.20-3.el9 |
| alma 9 | php-cli | 8.0.20-3.el9 |
| alma 9 | php-common | 8.0.20-3.el9 |
| alma 9 | php-dba | 8.0.20-3.el9 |
| alma 9 | php-dbg | 8.0.20-3.el9 |
| alma 9 | php-devel | 8.0.20-3.el9 |
| alma 9 | php-embedded | 8.0.20-3.el9 |
| alma 9 | php-enchant | 8.0.20-3.el9 |
| alma 9 | php-ffi | 8.0.20-3.el9 |
| alma 9 | php-fpm | 8.0.20-3.el9 |
| alma 9 | php-gd | 8.0.20-3.el9 |
| alma 9 | php-gmp | 8.0.20-3.el9 |
| alma 9 | php-intl | 8.0.20-3.el9 |
| alma 9 | php-ldap | 8.0.20-3.el9 |
| alma 9 | php-mbstring | 8.0.20-3.el9 |
| alma 9 | php-mysqlnd | 8.0.20-3.el9 |
| alma 9 | php-odbc | 8.0.20-3.el9 |
| alma 9 | php-opcache | 8.0.20-3.el9 |
| alma 9 | php-pdo | 8.0.20-3.el9 |
| alma 9 | php-pgsql | 8.0.20-3.el9 |
| alma 9 | php-process | 8.0.20-3.el9 |
| alma 9 | php-snmp | 8.0.20-3.el9 |
| alma 9 | php-soap | 8.0.20-3.el9 |
| alma 9 | php-xml | 8.0.20-3.el9 |
| alpine 3.14 | php7 | 7.4.32-r0 |
| alpine 3.15 | php7 | 7.4.28-r0 |
| alpine 3.15 | php8 | 8.0.16-r0 |
| amazon linux 2022 | php | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-bcmath | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-bcmath-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-cli | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-cli-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-common | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-common-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dba | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dba-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dbg | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dbg-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-debugsource | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-devel | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-embedded | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-embedded-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-enchant | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-enchant-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ffi | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ffi-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-fpm | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-fpm-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gd | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gd-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gmp | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gmp-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-intl | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-intl-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-json | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-json-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ldap | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ldap-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mbstring | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mbstring-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mysqlnd | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mysqlnd-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-odbc | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-odbc-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-opcache | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-opcache-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pdo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pdo-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pgsql | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pgsql-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-process | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-process-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-snmp | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-snmp-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-soap | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-soap-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-sodium | 7.4.27-1.amzn2022.0.3 |
| amazon linux 2022 | php-sodium-debuginfo | 7.4.27-1.amzn2022.0.3 |
| amazon linux 2022 | php-tidy | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-tidy-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xml | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xml-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xmlrpc | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xmlrpc-debuginfo | 7.4.28-1.amzn2022.0.4 |
| debian 11 | php7.4 | 7.4.28-1+deb11u1 |
| echo | php-7.2 | 7.2.34+e1 |
| Oracle Linux 8 | apcu-panel | 5.1.20-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | libzip | 1.7.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | libzip-devel | 1.7.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | libzip-tools | 1.7.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-bcmath | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-cli | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-common | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-dba | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-dbg | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-devel | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-embedded | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-enchant | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-ffi | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-fpm | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-gd | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-gmp | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-intl | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-json | 7.4.30-1.module+el8.7.0+20800+8e29b882 |
| Oracle Linux 8 | php-ldap | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-mbstring | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-mysqlnd | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-odbc | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-opcache | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-pdo | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-pear | 1:1.10.13-1.module+el8.7.0+20800+8e29b882 |
| Oracle Linux 8 | php-pecl-apcu | 5.1.20-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-apcu-devel | 5.1.20-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-rrd | 2.0.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-xdebug | 2.9.5-1.module+el8.3.0+7685+72d70b58 |
| Oracle Linux 8 | php-pecl-xdebug3 | 3.1.2-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-zip | 1.19.2-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pgsql | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-process | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-snmp | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-soap | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-xml | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-xmlrpc | 7.4.30-1.module+el8.7.0+20800+8e29b882 |
| Oracle Linux 9 | php | 8.0.20-3.el9 |
| Oracle Linux 9 | php-bcmath | 8.0.20-3.el9 |
| Oracle Linux 9 | php-cli | 8.0.20-3.el9 |
| Oracle Linux 9 | php-common | 8.0.20-3.el9 |
| Oracle Linux 9 | php-dba | 8.0.20-3.el9 |
| Oracle Linux 9 | php-dbg | 8.0.20-3.el9 |
| Oracle Linux 9 | php-devel | 8.0.20-3.el9 |
| Oracle Linux 9 | php-embedded | 8.0.20-3.el9 |
| Oracle Linux 9 | php-enchant | 8.0.20-3.el9 |
| Oracle Linux 9 | php-ffi | 8.0.20-3.el9 |
| Oracle Linux 9 | php-fpm | 8.0.20-3.el9 |
| Oracle Linux 9 | php-gd | 8.0.20-3.el9 |
| Oracle Linux 9 | php-gmp | 8.0.20-3.el9 |
| Oracle Linux 9 | php-intl | 8.0.20-3.el9 |
| Oracle Linux 9 | php-ldap | 8.0.20-3.el9 |
| Oracle Linux 9 | php-mbstring | 8.0.20-3.el9 |
| Oracle Linux 9 | php-mysqlnd | 8.0.20-3.el9 |
| Oracle Linux 9 | php-odbc | 8.0.20-3.el9 |
| Oracle Linux 9 | php-opcache | 8.0.20-3.el9 |
| Oracle Linux 9 | php-pdo | 8.0.20-3.el9 |
| Oracle Linux 9 | php-pgsql | 8.0.20-3.el9 |
| Oracle Linux 9 | php-process | 8.0.20-3.el9 |
| Oracle Linux 9 | php-snmp | 8.0.20-3.el9 |
| Oracle Linux 9 | php-soap | 8.0.20-3.el9 |
| Oracle Linux 9 | php-xml | 8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-bcmath | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-cli | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-common | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-dba | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-dbg | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-devel | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-embedded | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-enchant | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-ffi | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-fpm | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-gd | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-gmp | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-intl | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-ldap | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-mbstring | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-mysqlnd | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-odbc | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-opcache | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-pdo | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-pgsql | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-process | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-snmp | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-soap | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-xml | 0:8.0.20-3.el9 |
| rocky 8 | php:7.4::apcu-panel | 5.1.18-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::libzip | 1.6.1-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::libzip-devel | 1.6.1-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::libzip-tools | 1.6.1-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-bcmath | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-cli | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-common | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-dba | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-dbg | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-devel | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-embedded | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-enchant | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-ffi | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-fpm | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-gd | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-gmp | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-intl | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-json | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-ldap | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-mbstring | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-mysqlnd | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-odbc | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-opcache | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-pdo | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-pear | 1:1.10.13-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-pecl-apcu | 5.1.18-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php-pecl-apcu-devel | 5.1.18-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php-pecl-rrd | 2.0.1-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.4::php-pecl-xdebug | 2.9.5-1.module+el8.4.0+415+e936cba3 |
| rocky 8 | php:7.4::php-pecl-zip | 1.18.2-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php-pgsql | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-process | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-snmp | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-soap | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-xml | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-xmlrpc | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:8.0::apcu-panel | 5.1.20-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::libzip | 1.7.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::libzip-devel | 1.7.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::libzip-tools | 1.7.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-bcmath | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-cli | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-common | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-dba | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-dbg | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-devel | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-embedded | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-enchant | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-ffi | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-fpm | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-gd | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-gmp | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-intl | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-ldap | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-mbstring | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-mysqlnd | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-odbc | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-opcache | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-pdo | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-pear | 1:1.10.13-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:8.0::php-pecl-apcu | 5.1.20-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-apcu-devel | 5.1.20-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-rrd | 2.0.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-xdebug3 | 3.1.2-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-zip | 1.19.2-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pgsql | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-process | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-snmp | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-soap | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-xml | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 9 | php | 8.0.20-3.el9 |
| rocky 9 | php-bcmath | 8.0.20-3.el9 |
| rocky 9 | php-cli | 8.0.20-3.el9 |
| rocky 9 | php-common | 8.0.20-3.el9 |
| rocky 9 | php-dba | 8.0.20-3.el9 |
| rocky 9 | php-dbg | 8.0.20-3.el9 |
| rocky 9 | php-devel | 8.0.20-3.el9 |
| rocky 9 | php-embedded | 8.0.20-3.el9 |
| rocky 9 | php-enchant | 8.0.20-3.el9 |
| rocky 9 | php-ffi | 8.0.20-3.el9 |
| rocky 9 | php-fpm | 8.0.20-3.el9 |
| rocky 9 | php-gd | 8.0.20-3.el9 |
| rocky 9 | php-gmp | 8.0.20-3.el9 |
| rocky 9 | php-intl | 8.0.20-3.el9 |
| rocky 9 | php-ldap | 8.0.20-3.el9 |
| rocky 9 | php-mbstring | 8.0.20-3.el9 |
| rocky 9 | php-mysqlnd | 8.0.20-3.el9 |
| rocky 9 | php-odbc | 8.0.20-3.el9 |
| rocky 9 | php-opcache | 8.0.20-3.el9 |
| rocky 9 | php-pdo | 8.0.20-3.el9 |
| rocky 9 | php-pgsql | 8.0.20-3.el9 |
| rocky 9 | php-process | 8.0.20-3.el9 |
| rocky 9 | php-snmp | 8.0.20-3.el9 |
| rocky 9 | php-soap | 8.0.20-3.el9 |
| rocky 9 | php-xml | 8.0.20-3.el9 |
| ubuntu 20.04 | php7.4 | 7.4.3-4ubuntu2.9 |
| ubuntu 20.04-ESM | php7.4 | 7.4.3-4ubuntu2.9 |
| ubuntu 21.10 | php8.0 | 8.0.8-1ubuntu0.2 |
| ubuntu 22.04 | php8.1 | 8.1.2-1ubuntu1 |
Referenzen
- https://access.redhat.com/errata/RHSA-2022:8197
- https://access.redhat.com/security/cve/CVE-2021-21708
- https://bugs.php.net/bug.php?id=81708
- https://bugzilla.redhat.com/2055879
- https://bugzilla.redhat.com/2098521
- https://bugzilla.redhat.com/show_bug.cgi?id=2055879
- https://bugzilla.redhat.com/show_bug.cgi?id=2095447
- https://bugzilla.redhat.com/show_bug.cgi?id=2095752
Alle 25 Referenzen
- https://bugzilla.redhat.com/show_bug.cgi?id=2098521
- https://bugzilla.redhat.com/show_bug.cgi?id=2104630
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21708
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31625
- https://errata.almalinux.org/9/ALSA-2022-8197.html
- https://errata.rockylinux.org/RLSA-2022:8197
- https://linux.oracle.com/cve/CVE-2021-21708.html
- https://linux.oracle.com/errata/ELSA-2022-8197.html
- https://nakedsecurity.sophos.com/2022/02/18/irony-alert-php-fixes-security-flaw-in-input-validation-code/
- https://nvd.nist.gov/vuln/detail/CVE-2021-21708
- https://security.gentoo.org/glsa/202209-20
- https://security.netapp.com/advisory/ntap-20220325-0004/
- https://ubuntu.com/security/notices/USN-5303-1
- https://www.cve.org/CVERecord?id=CVE-2021-21708
- https://www.php.net/ChangeLog-7.php#PHP_7_4
- https://www.php.net/ChangeLog-8.php#PHP_8_1