PHP 5.3.7 - 7.3.31, 7.4.x < 7.4.25, 8.0.x < 8.0.12 Security Update (Oct 2021) - Linux

# SPDX-FileCopyrightText: 2021 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:php:php";

if (description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.117752");
  script_version("2025-09-24T05:39:03+0000");
  script_tag(name:"last_modification", value:"2025-09-24 05:39:03 +0000 (Wed, 24 Sep 2025)");
  script_tag(name:"creation_date", value:"2021-10-25 12:18:41 +0000 (Mon, 25 Oct 2021)");
  script_tag(name:"cvss_base", value:"6.9");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:M/Au:N/C:C/I:C/A:C");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2021-11-03 16:22:00 +0000 (Wed, 03 Nov 2021)");

  script_cve_id("CVE-2021-21703");

  script_tag(name:"qod_type", value:"remote_banner_unreliable");

  script_tag(name:"solution_type", value:"VendorFix");

  script_name("PHP 5.3.7 - 7.3.31, 7.4.x < 7.4.25, 8.0.x < 8.0.12 Security Update (Oct 2021) - Linux");

  script_category(ACT_GATHER_INFO);

  script_copyright("Copyright (C) 2021 Greenbone AG");
  script_family("Web application abuses");
  script_dependencies("gb_php_consolidation.nasl", "os_detection.nasl");
  script_mandatory_keys("php/detected", "Host/runs_unixoide");

  script_tag(name:"summary", value:"PHP released new versions which includes a security fix.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"Fixed bug #81026 (PHP-FPM oob R/W in root process leading to
  privilege escalation).");

  script_tag(name:"affected", value:"PHP versions 5.3.7 through 7.3.31, 7.4.x through 7.4.24 and
  8.0.x through 8.0.11.

  Note: While the referenced CVE is only listing PHP 7.3.x, 7.4.x and 8.0.x as affected the security
  research team is stating in the linked blog post that all versions down to 5.3.7 are affected.");

  script_tag(name:"solution", value:"Update to version 7.3.32 (not released yet), 7.4.25, 8.0.12
  or later.");

  script_xref(name:"URL", value:"https://www.php.net/ChangeLog-7.php#7.3.32");
  script_xref(name:"URL", value:"https://www.php.net/ChangeLog-7.php#7.4.25");
  script_xref(name:"URL", value:"https://www.php.net/ChangeLog-8.php#8.0.12");
  script_xref(name:"URL", value:"http://bugs.php.net/81026");
  script_xref(name:"URL", value:"https://www.ambionics.io/blog/php-fpm-local-root");

  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if (isnull(port = get_app_port(cpe: CPE)))
  exit(0);

if (!infos = get_app_version_and_location(cpe: CPE, port: port, exit_no_version: TRUE))
  exit(0);

version = infos["version"];
location = infos["location"];

if (version_in_range(version: version, test_version: "5.3.7", test_version2: "7.3.31")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "7.3.32 (not released yet)", install_path: location);
  security_message(port: port, data: report);
  exit(0);
}

if (version_in_range(version: version, test_version: "7.4", test_version2: "7.4.24")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "7.4.25", install_path: location);
  security_message(port: port, data: report);
  exit(0);
}

if (version_in_range(version: version, test_version: "8.0", test_version2: "8.0.11")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "8.0.12", install_path: location);
  security_message(port: port, data: report);
  exit(0);
}

exit(99);