In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
En PHP versiones 7.1.x anteriores a la versión 7.1.33, versiones 7.2.x anteriores a la versión 7.2.24 y versiones 7.3.x anteriores a 7.3.11, en ciertas configuraciones del FPM setup, es posible causar que el módulo FPM escriba más allá de los búferes asignados en el espacio reservado para datos de protocolo FCGI, abriendo así la posibilidad de ejecución de código remota.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-120
|
| [email protected] | Primary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| php | php | * | <built-in method update of dict object at 0x7cfbd4cbc440> | Application |
| php | php | * | <built-in method update of dict object at 0x7cfc1cb0f640> | Application |
| php | php | * | <built-in method update of dict object at 0x7cfc1cc5d480> | Application |
| canonical | ubuntu_linux | 12.04 | <built-in method update of dict object at 0x7cfc1c2ef200> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x7cfc0c4f6e00> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x7cfc0c4f5300> | Operating System |
| canonical | ubuntu_linux | 18.04 | <built-in method update of dict object at 0x7cfc0c4f6500> | Operating System |
| canonical | ubuntu_linux | 19.04 | <built-in method update of dict object at 0x7cfbd4cbdac0> | Operating System |
| canonical | ubuntu_linux | 19.10 | <built-in method update of dict object at 0x7cfc0c49f340> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7cfc0c4f5980> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7cfbd4cbe080> | Operating System |
| fedoraproject | fedora | 29 | <built-in method update of dict object at 0x7cfbd4cbd200> | Operating System |
| fedoraproject | fedora | 30 | <built-in method update of dict object at 0x7cfc0c2b6340> | Operating System |
| fedoraproject | fedora | 31 | <built-in method update of dict object at 0x7cfc0c4f6ec0> | Operating System |
| tenable | tenable.sc | * | <built-in method update of dict object at 0x7cfc1cb0e580> | Application |
| redhat | software_collections | 1.0 | <built-in method update of dict object at 0x7cfc0c49db80> | Application |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7cfc1cb0c540> | Operating System |
| redhat | enterprise_linux_desktop | 6.0 | <built-in method update of dict object at 0x7cfc1cb0f980> | Operating System |
| redhat | enterprise_linux_desktop | 7.0 | <built-in method update of dict object at 0x7cfc1cb0c080> | Operating System |
| redhat | enterprise_linux_eus | 7.7 | <built-in method update of dict object at 0x7cfc0c4fc280> | Operating System |
| redhat | enterprise_linux_eus | 8.1 | <built-in method update of dict object at 0x7cfc0c2b7640> | Operating System |
| redhat | enterprise_linux_eus | 8.2 | <built-in method update of dict object at 0x7cfc1cb0fb80> | Operating System |
| redhat | enterprise_linux_eus | 8.4 | <built-in method update of dict object at 0x7cfc0c49e200> | Operating System |
| redhat | enterprise_linux_eus | 8.6 | <built-in method update of dict object at 0x7cfbd4cbd140> | Operating System |
| redhat | enterprise_linux_eus | 8.8 | <built-in method update of dict object at 0x7cfc0c4fc780> | Operating System |
| redhat | enterprise_linux_eus_compute_node | 7.7 | <built-in method update of dict object at 0x7cfc1c2fe340> | Operating System |
| redhat | enterprise_linux_for_arm_64 | 8.0_aarch64 | <built-in method update of dict object at 0x7cfc0c4f4780> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 8.1_aarch64 | <built-in method update of dict object at 0x7cfc0c4f75c0> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 8.2_aarch64 | <built-in method update of dict object at 0x7cfbf5ffc4c0> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 8.4_aarch64 | <built-in method update of dict object at 0x7cfbf5ffe240> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 8.6_aarch64 | <built-in method update of dict object at 0x7cfbf5ffe380> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 8.8_aarch64 | <built-in method update of dict object at 0x7cfbf5ffd980> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems | 6.0_s390x | <built-in method update of dict object at 0x7cfc0c226180> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems | 7.0_s390x | <built-in method update of dict object at 0x7cfbf5ffcb40> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems | 8.0_s390x | <built-in method update of dict object at 0x7cfbf5ffc180> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 7.7_s390x | <built-in method update of dict object at 0x7cfbf5ffdf00> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.1_s390x | <built-in method update of dict object at 0x7cfbf5ffd900> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.2_s390x | <built-in method update of dict object at 0x7cfbf5ffe5c0> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.4_s390x | <built-in method update of dict object at 0x7cfbf5ffecc0> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.6_s390x | <built-in method update of dict object at 0x7cfbf5ffdb40> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.8_s390x | <built-in method update of dict object at 0x7cfbf5ffe580> | Operating System |
| redhat | enterprise_linux_for_power_big_endian | 6.0_ppc64 | <built-in method update of dict object at 0x7cfbf5ffc380> | Operating System |
| redhat | enterprise_linux_for_power_big_endian | 7.0_ppc64 | <built-in method update of dict object at 0x7cfbf5ffeb40> | Operating System |
| redhat | enterprise_linux_for_power_big_endian_eus | 7.7_ppc64 | <built-in method update of dict object at 0x7cfbf5ffd300> | Operating System |
| redhat | enterprise_linux_for_power_little_endian | 7.0_ppc64le | <built-in method update of dict object at 0x7cfbf5ffc300> | Operating System |
| redhat | enterprise_linux_for_power_little_endian | 8.0_ppc64le | <built-in method update of dict object at 0x7cfbf5ffe400> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 7.7_ppc64le | <built-in method update of dict object at 0x7cfc1cbc3680> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.1_ppc64le | <built-in method update of dict object at 0x7cfbd602db80> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.2_ppc64le | <built-in method update of dict object at 0x7cfbd602dbc0> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.4_ppc64le | <built-in method update of dict object at 0x7cfbd602ea40> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.6_ppc64le | <built-in method update of dict object at 0x7cfbd602c600> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.8_ppc64le | <built-in method update of dict object at 0x7cfbd602df00> | Operating System |
| redhat | enterprise_linux_for_scientific_computing | 7.0 | <built-in method update of dict object at 0x7cfc0c213640> | Operating System |
| redhat | enterprise_linux_server | 6.0 | <built-in method update of dict object at 0x7cfc0c41c780> | Operating System |
| redhat | enterprise_linux_server | 7.0 | <built-in method update of dict object at 0x7cfc0c41f3c0> | Operating System |
| redhat | enterprise_linux_server_aus | 7.7 | <built-in method update of dict object at 0x7cfc0c41c2c0> | Operating System |
| redhat | enterprise_linux_server_aus | 8.2 | <built-in method update of dict object at 0x7cfc1c28ca00> | Operating System |
| redhat | enterprise_linux_server_aus | 8.4 | <built-in method update of dict object at 0x7cfc0c41c8c0> | Operating System |
| redhat | enterprise_linux_server_aus | 8.6 | <built-in method update of dict object at 0x7cfc0c41dbc0> | Operating System |
| redhat | enterprise_linux_server_tus | 7.7 | <built-in method update of dict object at 0x7cfc1c167f40> | Operating System |
| redhat | enterprise_linux_server_tus | 8.2 | <built-in method update of dict object at 0x7cfc0c225980> | Operating System |
| redhat | enterprise_linux_server_tus | 8.4 | <built-in method update of dict object at 0x7cfc0c41ca40> | Operating System |
| redhat | enterprise_linux_server_tus | 8.6 | <built-in method update of dict object at 0x7cfc0c41cbc0> | Operating System |
| redhat | enterprise_linux_server_tus | 8.8 | <built-in method update of dict object at 0x7cfc0c4c5a40> | Operating System |
| redhat | enterprise_linux_workstation | 6.0 | <built-in method update of dict object at 0x7cfc3c745300> | Operating System |
| redhat | enterprise_linux_workstation | 7.0 | <built-in method update of dict object at 0x7cfc0accd140> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:php:php:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:php:php:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:php:php:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.1_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.2_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.4_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* |