CVE-2021-21708
php: Use after free due to php_filter_float() failing for ints
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD, Bitnami. Plus basse selon Red Hat (élevée), AlmaLinux (moyenne), Amazon (moyenne), Oracle (moyenne), Rocky Linux (moyenne), Ubuntu (moyenne).
Description
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | libphp, php, php-min | 7.4.28, 8.0.16, 8.1.3 |
| alma 8 | php:7.4::apcu-panel, php:7.4::libzip, php:7.4::libzip-devel et 69 autres | 5.1.18-1.module_el8.6.0+2750+78feabcb et 13 autres |
| alma 9 | php, php-bcmath, php-cli et 22 autres | 8.0.20-3.el9 |
| alpine 3.14 | php7 | 7.4.32-r0 |
| alpine 3.15 | php7, php8 | 7.4.28-r0 et 1 autres |
| amazon linux 2022 | php, php-bcmath, php-bcmath-debuginfo et 55 autres | 7.4.28-1.amzn2022.0.4 et 1 autres |
| debian 11 | php7.4 | 7.4.28-1+deb11u1 |
| echo | php-7.2 | 7.2.34+e1 |
| Oracle Linux 8 | apcu-panel, libzip, libzip-devel et 35 autres | 5.1.20-1.module+el8.6.0+20568+84712317 et 8 autres |
| Oracle Linux 9 | php, php-bcmath, php-cli et 22 autres | 8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php, php-bcmath, php-cli et 22 autres | 0:8.0.20-3.el9 |
| rocky 8 | php:7.4::apcu-panel, php:7.4::libzip, php:7.4::libzip-devel et 69 autres | 5.1.18-1.module+el8.6.0+789+2130c178 et 12 autres |
Afficher les 352 entrées de 17 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | libphp | 7.4.28, 8.0.16, 8.1.3 |
| bitnami::Bitnami Vulnerability Database | php | 7.4.28, 8.0.16, 8.1.3 |
| bitnami::Bitnami Vulnerability Database | php-min | 7.4.28, 8.0.16, 8.1.3 |
| alma 8 | php:7.4::apcu-panel | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::libzip | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::libzip-devel | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::libzip-tools | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-bcmath | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-cli | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-common | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-dba | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-dbg | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-devel | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-embedded | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-enchant | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-ffi | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-fpm | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-gd | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-gmp | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-intl | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-json | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-ldap | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-mbstring | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-mysqlnd | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-odbc | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-opcache | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-pdo | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-pear | 1:1.10.13-1.module_el8.6.0+3268+b150a051 |
| alma 8 | php:7.4::php-pecl-apcu | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-apcu-devel | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-rrd | 2.0.1-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-xdebug | 2.9.5-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pecl-zip | 1.18.2-1.module_el8.6.0+2750+78feabcb |
| alma 8 | php:7.4::php-pgsql | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-process | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-snmp | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-soap | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-xml | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:7.4::php-xmlrpc | 7.4.30-1.module_el8.7.0+3286+227f3cf0 |
| alma 8 | php:8.0::apcu-panel | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::libzip | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::libzip-devel | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::libzip-tools | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-bcmath | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-cli | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-common | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-dba | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-dbg | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-devel | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-embedded | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-enchant | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-ffi | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-fpm | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-gd | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-gmp | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-intl | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-ldap | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-mbstring | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-mysqlnd | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-odbc | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-opcache | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-pdo | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-pear | 1:1.10.13-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-apcu | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-apcu-devel | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-rrd | 2.0.3-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-xdebug3 | 3.1.2-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pecl-zip | 1.19.2-1.module_el8.6.0+2739+efabdb8f |
| alma 8 | php:8.0::php-pgsql | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-process | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-snmp | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-soap | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 8 | php:8.0::php-xml | 8.0.20-2.module_el8.7.0+3286+6cee236e |
| alma 9 | php | 8.0.20-3.el9 |
| alma 9 | php-bcmath | 8.0.20-3.el9 |
| alma 9 | php-cli | 8.0.20-3.el9 |
| alma 9 | php-common | 8.0.20-3.el9 |
| alma 9 | php-dba | 8.0.20-3.el9 |
| alma 9 | php-dbg | 8.0.20-3.el9 |
| alma 9 | php-devel | 8.0.20-3.el9 |
| alma 9 | php-embedded | 8.0.20-3.el9 |
| alma 9 | php-enchant | 8.0.20-3.el9 |
| alma 9 | php-ffi | 8.0.20-3.el9 |
| alma 9 | php-fpm | 8.0.20-3.el9 |
| alma 9 | php-gd | 8.0.20-3.el9 |
| alma 9 | php-gmp | 8.0.20-3.el9 |
| alma 9 | php-intl | 8.0.20-3.el9 |
| alma 9 | php-ldap | 8.0.20-3.el9 |
| alma 9 | php-mbstring | 8.0.20-3.el9 |
| alma 9 | php-mysqlnd | 8.0.20-3.el9 |
| alma 9 | php-odbc | 8.0.20-3.el9 |
| alma 9 | php-opcache | 8.0.20-3.el9 |
| alma 9 | php-pdo | 8.0.20-3.el9 |
| alma 9 | php-pgsql | 8.0.20-3.el9 |
| alma 9 | php-process | 8.0.20-3.el9 |
| alma 9 | php-snmp | 8.0.20-3.el9 |
| alma 9 | php-soap | 8.0.20-3.el9 |
| alma 9 | php-xml | 8.0.20-3.el9 |
| alpine 3.14 | php7 | 7.4.32-r0 |
| alpine 3.15 | php7 | 7.4.28-r0 |
| alpine 3.15 | php8 | 8.0.16-r0 |
| amazon linux 2022 | php | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-bcmath | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-bcmath-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-cli | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-cli-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-common | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-common-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dba | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dba-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dbg | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-dbg-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-debugsource | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-devel | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-embedded | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-embedded-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-enchant | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-enchant-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ffi | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ffi-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-fpm | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-fpm-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gd | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gd-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gmp | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-gmp-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-intl | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-intl-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-json | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-json-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ldap | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-ldap-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mbstring | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mbstring-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mysqlnd | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-mysqlnd-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-odbc | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-odbc-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-opcache | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-opcache-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pdo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pdo-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pgsql | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-pgsql-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-process | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-process-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-snmp | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-snmp-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-soap | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-soap-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-sodium | 7.4.27-1.amzn2022.0.3 |
| amazon linux 2022 | php-sodium-debuginfo | 7.4.27-1.amzn2022.0.3 |
| amazon linux 2022 | php-tidy | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-tidy-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xml | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xml-debuginfo | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xmlrpc | 7.4.28-1.amzn2022.0.4 |
| amazon linux 2022 | php-xmlrpc-debuginfo | 7.4.28-1.amzn2022.0.4 |
| debian 11 | php7.4 | 7.4.28-1+deb11u1 |
| echo | php-7.2 | 7.2.34+e1 |
| Oracle Linux 8 | apcu-panel | 5.1.20-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | libzip | 1.7.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | libzip-devel | 1.7.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | libzip-tools | 1.7.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-bcmath | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-cli | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-common | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-dba | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-dbg | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-devel | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-embedded | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-enchant | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-ffi | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-fpm | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-gd | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-gmp | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-intl | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-json | 7.4.30-1.module+el8.7.0+20800+8e29b882 |
| Oracle Linux 8 | php-ldap | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-mbstring | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-mysqlnd | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-odbc | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-opcache | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-pdo | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-pear | 1:1.10.13-1.module+el8.7.0+20800+8e29b882 |
| Oracle Linux 8 | php-pecl-apcu | 5.1.20-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-apcu-devel | 5.1.20-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-rrd | 2.0.3-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-xdebug | 2.9.5-1.module+el8.3.0+7685+72d70b58 |
| Oracle Linux 8 | php-pecl-xdebug3 | 3.1.2-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pecl-zip | 1.19.2-1.module+el8.6.0+20568+84712317 |
| Oracle Linux 8 | php-pgsql | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-process | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-snmp | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-soap | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-xml | 8.0.20-2.module+el8.7.0+20803+bb5ab920 |
| Oracle Linux 8 | php-xmlrpc | 7.4.30-1.module+el8.7.0+20800+8e29b882 |
| Oracle Linux 9 | php | 8.0.20-3.el9 |
| Oracle Linux 9 | php-bcmath | 8.0.20-3.el9 |
| Oracle Linux 9 | php-cli | 8.0.20-3.el9 |
| Oracle Linux 9 | php-common | 8.0.20-3.el9 |
| Oracle Linux 9 | php-dba | 8.0.20-3.el9 |
| Oracle Linux 9 | php-dbg | 8.0.20-3.el9 |
| Oracle Linux 9 | php-devel | 8.0.20-3.el9 |
| Oracle Linux 9 | php-embedded | 8.0.20-3.el9 |
| Oracle Linux 9 | php-enchant | 8.0.20-3.el9 |
| Oracle Linux 9 | php-ffi | 8.0.20-3.el9 |
| Oracle Linux 9 | php-fpm | 8.0.20-3.el9 |
| Oracle Linux 9 | php-gd | 8.0.20-3.el9 |
| Oracle Linux 9 | php-gmp | 8.0.20-3.el9 |
| Oracle Linux 9 | php-intl | 8.0.20-3.el9 |
| Oracle Linux 9 | php-ldap | 8.0.20-3.el9 |
| Oracle Linux 9 | php-mbstring | 8.0.20-3.el9 |
| Oracle Linux 9 | php-mysqlnd | 8.0.20-3.el9 |
| Oracle Linux 9 | php-odbc | 8.0.20-3.el9 |
| Oracle Linux 9 | php-opcache | 8.0.20-3.el9 |
| Oracle Linux 9 | php-pdo | 8.0.20-3.el9 |
| Oracle Linux 9 | php-pgsql | 8.0.20-3.el9 |
| Oracle Linux 9 | php-process | 8.0.20-3.el9 |
| Oracle Linux 9 | php-snmp | 8.0.20-3.el9 |
| Oracle Linux 9 | php-soap | 8.0.20-3.el9 |
| Oracle Linux 9 | php-xml | 8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-bcmath | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-cli | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-common | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-dba | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-dbg | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-devel | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-embedded | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-enchant | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-ffi | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-fpm | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-gd | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-gmp | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-intl | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-ldap | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-mbstring | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-mysqlnd | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-odbc | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-opcache | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-pdo | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-pgsql | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-process | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-snmp | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-soap | 0:8.0.20-3.el9 |
| rapidfort Oracle Linux 9 | php-xml | 0:8.0.20-3.el9 |
| rocky 8 | php:7.4::apcu-panel | 5.1.18-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::libzip | 1.6.1-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::libzip-devel | 1.6.1-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::libzip-tools | 1.6.1-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-bcmath | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-cli | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-common | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-dba | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-dbg | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-devel | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-embedded | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-enchant | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-ffi | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-fpm | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-gd | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-gmp | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-intl | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-json | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-ldap | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-mbstring | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-mysqlnd | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-odbc | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-opcache | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-pdo | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-pear | 1:1.10.13-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-pecl-apcu | 5.1.18-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php-pecl-apcu-devel | 5.1.18-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php-pecl-rrd | 2.0.1-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.4::php-pecl-xdebug | 2.9.5-1.module+el8.4.0+415+e936cba3 |
| rocky 8 | php:7.4::php-pecl-zip | 1.18.2-1.module+el8.6.0+789+2130c178 |
| rocky 8 | php:7.4::php-pgsql | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-process | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-snmp | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-soap | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-xml | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:7.4::php-xmlrpc | 7.4.30-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:8.0::apcu-panel | 5.1.20-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::libzip | 1.7.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::libzip-devel | 1.7.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::libzip-tools | 1.7.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-bcmath | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-cli | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-common | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-dba | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-dbg | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-devel | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-embedded | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-enchant | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-ffi | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-fpm | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-gd | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-gmp | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-intl | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-ldap | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-mbstring | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-mysqlnd | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-odbc | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-opcache | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-pdo | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-pear | 1:1.10.13-1.module+el8.7.0+1067+0a7071cc |
| rocky 8 | php:8.0::php-pecl-apcu | 5.1.20-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-apcu-devel | 5.1.20-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-rrd | 2.0.3-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-xdebug3 | 3.1.2-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pecl-zip | 1.19.2-1.module+el8.6.0+790+fc63e43f |
| rocky 8 | php:8.0::php-pgsql | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-process | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-snmp | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-soap | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 8 | php:8.0::php-xml | 8.0.20-2.module+el8.7.0+1068+7fd2c980 |
| rocky 9 | php | 8.0.20-3.el9 |
| rocky 9 | php-bcmath | 8.0.20-3.el9 |
| rocky 9 | php-cli | 8.0.20-3.el9 |
| rocky 9 | php-common | 8.0.20-3.el9 |
| rocky 9 | php-dba | 8.0.20-3.el9 |
| rocky 9 | php-dbg | 8.0.20-3.el9 |
| rocky 9 | php-devel | 8.0.20-3.el9 |
| rocky 9 | php-embedded | 8.0.20-3.el9 |
| rocky 9 | php-enchant | 8.0.20-3.el9 |
| rocky 9 | php-ffi | 8.0.20-3.el9 |
| rocky 9 | php-fpm | 8.0.20-3.el9 |
| rocky 9 | php-gd | 8.0.20-3.el9 |
| rocky 9 | php-gmp | 8.0.20-3.el9 |
| rocky 9 | php-intl | 8.0.20-3.el9 |
| rocky 9 | php-ldap | 8.0.20-3.el9 |
| rocky 9 | php-mbstring | 8.0.20-3.el9 |
| rocky 9 | php-mysqlnd | 8.0.20-3.el9 |
| rocky 9 | php-odbc | 8.0.20-3.el9 |
| rocky 9 | php-opcache | 8.0.20-3.el9 |
| rocky 9 | php-pdo | 8.0.20-3.el9 |
| rocky 9 | php-pgsql | 8.0.20-3.el9 |
| rocky 9 | php-process | 8.0.20-3.el9 |
| rocky 9 | php-snmp | 8.0.20-3.el9 |
| rocky 9 | php-soap | 8.0.20-3.el9 |
| rocky 9 | php-xml | 8.0.20-3.el9 |
| ubuntu 20.04 | php7.4 | 7.4.3-4ubuntu2.9 |
| ubuntu 20.04-ESM | php7.4 | 7.4.3-4ubuntu2.9 |
| ubuntu 21.10 | php8.0 | 8.0.8-1ubuntu0.2 |
| ubuntu 22.04 | php8.1 | 8.1.2-1ubuntu1 |
Références
- https://access.redhat.com/errata/RHSA-2022:8197
- https://access.redhat.com/security/cve/CVE-2021-21708
- https://bugs.php.net/bug.php?id=81708
- https://bugzilla.redhat.com/2055879
- https://bugzilla.redhat.com/2098521
- https://bugzilla.redhat.com/show_bug.cgi?id=2055879
- https://bugzilla.redhat.com/show_bug.cgi?id=2095447
- https://bugzilla.redhat.com/show_bug.cgi?id=2095752
Les 25 références
- https://bugzilla.redhat.com/show_bug.cgi?id=2098521
- https://bugzilla.redhat.com/show_bug.cgi?id=2104630
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21708
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31625
- https://errata.almalinux.org/9/ALSA-2022-8197.html
- https://errata.rockylinux.org/RLSA-2022:8197
- https://linux.oracle.com/cve/CVE-2021-21708.html
- https://linux.oracle.com/errata/ELSA-2022-8197.html
- https://nakedsecurity.sophos.com/2022/02/18/irony-alert-php-fixes-security-flaw-in-input-validation-code/
- https://nvd.nist.gov/vuln/detail/CVE-2021-21708
- https://security.gentoo.org/glsa/202209-20
- https://security.netapp.com/advisory/ntap-20220325-0004/
- https://ubuntu.com/security/notices/USN-5303-1
- https://www.cve.org/CVERecord?id=CVE-2021-21708
- https://www.php.net/ChangeLog-7.php#PHP_7_4
- https://www.php.net/ChangeLog-8.php#PHP_8_1