BIT-PHP-MIN-2021-21703 PHP-FPM memory access in root process leading to privilege escalation

🗓️ 14 Jan 2025 19:22:50Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Possible privilege escalation in PHP FPM due to memory access vulnerabilities in specific versions.

Reporter	Title	Published	Views	Family All 181
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PHP may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2021-21703, CVE-2021-21708, CVE-2021-21707, CVE-2022-31629, CVE-2022-31628)	16 Dec 202217:01	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package php8.2 version 8.0.12-alt1	28 Oct 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package php7 version 7.3.32-alt1	30 Oct 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.0 version 8.0.12-alt1	2 Nov 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.1 version 8.0.12-alt1	28 Oct 202100:00	–	altlinux
Tenable Nessus	Alibaba Cloud Linux 3 : 0147: php:7.4 (ALINUX3-SA-2022:0147)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : php:7.4 (ALSA-2022:1935)	12 May 202200:00	–	nessus
Tenable Nessus	CentOS 8 : php:7.4 (CESA-2022:1935)	10 May 202200:00	–	nessus
Tenable Nessus	Debian DLA-2794-1 : php7.0 - LTS security update	27 Oct 202100:00	–	nessus
Tenable Nessus	Debian DSA-4992-1 : php7.4 - security update	26 Oct 202100:00	–	nessus

Source	Link
openwall	www.openwall.com/lists/oss-security/2021/10/26/7
bugs	www.bugs.php.net/bug.php
lists	www.lists.debian.org/debian-lts-announce/2021/10/msg00021.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PZVLICZUJMXOGWOUWSBAEGIVTF6Y6V3/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO5RA6YOBGGGKLIA6F6BQRZDDECF5L3R/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBM3KKB3RY2YPOKNMC4HIH7IH3T3WC74/
security	www.security.gentoo.org/glsa/202209-20
security	www.security.netapp.com/advisory/ntap-20211118-0003/
debian	www.debian.org/security/2021/dsa-4992
debian	www.debian.org/security/2021/dsa-4993

11 Aug 2025 15:13Current

7.5High risk

Vulners AI Score7.5

CVSS 26.9

CVSS 3.17 - 7.8

EPSS0.01337