Vulnerability · Published Aug 11, 2023 · Assigned by php
CVE-2023-3824Buffer overflow and overread in phar_dir_read()
Critical 9.4
In plain English
A critical-severity memory corruption in PHP from PHP Group. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 21.8% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.4Critical
Exploit odds (30 days)21.8%top 2.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | apcu-panel | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:8 | apcu-panel | 5.1.20-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:9 | apcu-panel | 5.1.21-1.module_el9.1.0+15+94ba28e4 | ALSA-2024:0387 |
| AlmaLinux:8 | libzip | 1.6.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2024:10952 |
| AlmaLinux:8 | libzip | 1.7.3-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | libzip | 1.7.3-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:8 | libzip | 1.6.1-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:8 | libzip | 1.6.1-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | libzip-devel | 1.7.3-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | libzip-devel | 1.6.1-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | libzip-devel | 1.7.3-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:8 | libzip-devel | 1.6.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2024:10952 |
| AlmaLinux:8 | libzip-tools | 1.7.3-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | libzip-tools | 1.7.3-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:8 | libzip-tools | 1.6.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2024:10952 |
| AlmaLinux:8 | libzip-tools | 1.6.1-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:8 | libzip-tools | 1.6.1-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-bcmath | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-bcmath | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-bcmath | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-bcmath | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-cli | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-cli | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-cli | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-cli | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-common | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-common | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-common | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-common | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-dba | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-dba | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-dba | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-dba | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-dbg | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-dbg | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-dbg | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-dbg | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-devel | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-devel | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-devel | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-devel | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-embedded | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-embedded | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-embedded | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-embedded | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-enchant | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-enchant | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-enchant | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-enchant | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-ffi | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-ffi | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-ffi | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-ffi | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-fpm | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-fpm | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-fpm | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-fpm | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-gd | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-gd | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-gd | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-gd | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-gmp | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-gmp | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-gmp | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-gmp | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-intl | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-intl | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-intl | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-intl | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-json | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-ldap | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-ldap | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-ldap | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-ldap | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-mbstring | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-mbstring | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-mbstring | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-mbstring | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-mysqlnd | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-mysqlnd | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-mysqlnd | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-mysqlnd | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-odbc | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-odbc | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-odbc | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-odbc | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-opcache | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-opcache | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-opcache | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-opcache | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-pdo | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pdo | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-pdo | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-pdo | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-pear | 1:1.10.13-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pear | 1:1.10.13-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-apcu | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-apcu | 5.1.20-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-apcu | 5.1.20-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-apcu | 5.1.18-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-pecl-apcu | 5.1.21-1.module_el9.1.0+15+94ba28e4 | ALSA-2024:0387 |
| AlmaLinux:8 | php-pecl-apcu-devel | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-apcu-devel | 5.1.20-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-apcu-devel | 5.1.18-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-apcu-devel | 5.1.20-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:9 | php-pecl-apcu-devel | 5.1.21-1.module_el9.1.0+15+94ba28e4 | ALSA-2024:0387 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.1-1.module_el8.6.0+3059+d65eee13 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.1-1.module_el8.3.0+2009+b272fdef | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.1-1.module_el8.4.0+2229+b272fdef | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.3-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.3-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.1-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:9 | php-pecl-rrd | 2.0.3-4.module_el9.1.0+15+94ba28e4 | ALSA-2024:0387 |
| AlmaLinux:8 | php-pecl-xdebug | 2.9.5-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-xdebug | 2.9.5-1.module_el8.6.0+3239+bedf0508 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-xdebug | 2.9.5-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-xdebug3 | 3.1.2-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-xdebug3 | 3.1.2-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:9 | php-pecl-xdebug3 | 3.1.4-1.module_el9.1.0+15+94ba28e4 | ALSA-2024:0387 |
| AlmaLinux:8 | php-pecl-zip | 1.18.2-1.module_el8.6.0+2750+78feabcb | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-zip | 1.19.2-1.module_el8.6.0+2739+efabdb8f | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-zip | 1.19.2-1.module_el8.6.0+3061+6878dd1b | ALSA-2023:5927 |
| AlmaLinux:8 | php-pecl-zip | 1.18.2-1.module_el8.6.0+3239+bedf0508 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pecl-zip | 1.18.2-1.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-pecl-zip | 1.20.1-1.module_el9.1.0+15+94ba28e4 | ALSA-2024:0387 |
| AlmaLinux:8 | php-pgsql | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-pgsql | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-pgsql | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-pgsql | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-process | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-process | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-process | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-process | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-snmp | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:8 | php-snmp | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:9 | php-snmp | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-snmp | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-soap | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-soap | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-soap | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:9 | php-soap | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:8 | php-xml | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| AlmaLinux:8 | php-xml | 8.0.30-1.module_el8.8.0+3655+3335cff6 | ALSA-2023:5927 |
| AlmaLinux:9 | php-xml | 8.0.30-1.el9_2 | ALSA-2023:5926 |
| AlmaLinux:9 | php-xml | 8.1.27-1.module_el9.3.0+53+44872dd1 | ALSA-2024:0387 |
| AlmaLinux:8 | php-xmlrpc | 7.4.33-2.module_el8.10.0+3935+28808425 | ALSA-2024:10952 |
| Debian:12 | php8.2 | 8.2.18-1~deb12u1 | DSA-5661-1 |
| Debian:12 | php8.2 | 8.2.18-1~deb12u1 | DEBIAN-CVE-2023-3824 |
| Rocky Linux:8 | libzip | 0:1.6.1-1.module+el8.10.0+1604+6558efc7 | RLSA-2024:10952 |
| Rocky Linux:8 | libzip | 0:1.7.3-1.module+el8.6.0+790+fc63e43f | RLSA-2023:5927 |
| Rocky Linux:8 | php | 0:8.0.30-1.module+el8.8.0+1550+d8f1b18f | RLSA-2023:5927 |
| Rocky Linux:8 | php | 0:7.4.33-2.module+el8.10.0+1912+72767185 | RLSA-2024:10952 |
| Rocky Linux:9 | php | 0:8.0.30-1.el9_2 | RLSA-2023:5926 |
| Rocky Linux:8 | php-pear | 1:1.10.13-1.module+el8.7.0+1067+0a7071cc | RLSA-2023:5927 |
| Rocky Linux:8 | php-pear | 1:1.10.13-1.module+el8.10.0+1604+6558efc7 | RLSA-2024:10952 |
| Rocky Linux:8 | php-pecl-apcu | 0:5.1.18-1.module+el8.10.0+1604+6558efc7 | RLSA-2024:10952 |
| Rocky Linux:8 | php-pecl-apcu | 0:5.1.20-1.module+el8.6.0+790+fc63e43f | RLSA-2023:5927 |
| Rocky Linux:9 | php-pecl-apcu | 0:5.1.21-1.module+el9.6.0+32040+1f1dedb8 | RLSA-2024:0387 |
| Rocky Linux:8 | php-pecl-rrd | 0:2.0.1-1.module+el8.10.0+1604+6558efc7 | RLSA-2024:10952 |
| Rocky Linux:8 | php-pecl-rrd | 0:2.0.3-1.module+el8.6.0+790+fc63e43f | RLSA-2023:5927 |
| Rocky Linux:9 | php-pecl-rrd | 0:2.0.3-4.module+el9.6.0+32040+1f1dedb8 | RLSA-2024:0387 |
| Rocky Linux:9 | php-pecl-rrd | 0:2.0.3-4.module+el9.6.0+32042+808943ae | RLSA-2024:0387 |
| Rocky Linux:9 | php-pecl-rrd | 0:2.0.3-4.module+el9.6.0+32041+66e66fb7 | RLSA-2024:0387 |
| Rocky Linux:8 | php-pecl-xdebug | 0:2.9.5-1.module+el8.10.0+1604+6558efc7 | RLSA-2024:10952 |
| Rocky Linux:8 | php-pecl-xdebug3 | 0:3.1.2-1.module+el8.6.0+790+fc63e43f | RLSA-2023:5927 |
| Rocky Linux:9 | php-pecl-xdebug3 | 0:3.1.4-1.module+el9.6.0+32040+1f1dedb8 | RLSA-2024:0387 |
| Rocky Linux:8 | php-pecl-zip | 0:1.18.2-1.module+el8.10.0+1604+6558efc7 | RLSA-2024:10952 |
| Rocky Linux:8 | php-pecl-zip | 0:1.19.2-1.module+el8.6.0+790+fc63e43f | RLSA-2023:5927 |
| Rocky Linux:9 | php-pecl-zip | 0:1.20.1-1.module+el9.6.0+32040+1f1dedb8 | RLSA-2024:0387 |
| Ubuntu:22.04:LTS | php8.1 | 8.1.2-1ubuntu2.14 | UBUNTU-CVE-2023-3824 |
| Ubuntu:22.04:LTS | php8.1 | 8.1.2-1ubuntu2.14 | USN-6305-1 |
Affected products (as reported)
Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
References
- https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7NBF77WN6DTVTY2RE73IGPYD6M4PIAWA/
- https://security.netapp.com/advisory/ntap-20230825-0001/
- https://lists.debian.org/debian-lts-announce/2023/09/msg00002.html