UbuntuUSN-5125-1PHP vulnerability
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
50.4%
Releases
- Ubuntu 21.10
- Ubuntu 21.04
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- php5 - HTML-embedded scripting language interpreter
- php7.0 - HTML-embedded scripting language interpreter
- php7.2 - HTML-embedded scripting language interpreter
- php7.4 - HTML-embedded scripting language interpreter
- php8.0 - HTML-embedded scripting language interpreter
Details
It was discovered that PHP-FPM in PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 21.10 | noarch | php8.0-fpm | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libapache2-mod-php8.0 | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libapache2-mod-php8.0-dbgsym | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libphp8.0-embed | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libphp8.0-embed-dbgsym | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | php8.0 | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | php8.0-bcmath | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | php8.0-bcmath-dbgsym | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | php8.0-bz2 | < 8.0.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | php8.0-bz2-dbgsym | < 8.0.8-1ubuntu0.1 | UNKNOWN |
References
Related
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
50.4%