CVE-2024-8927

EUVD-2024-49490

08.10.2024, 04:15

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in certain scenarios, the content of this variable can be controlled by the request submitter via HTTP headers, which can lead to cgi.force_redirect option not being correctly applied. In certain configurations this may lead to arbitrary file inclusion in PHP.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 57%

Affected Products (NVD)

Vendor	Product	Version
php	php	8.1.0 ≤ 𝑥 < 8.1.30
php	php	8.2.0 ≤ 𝑥 < 8.2.24
php	php	8.3.0 ≤ 𝑥 < 8.3.12

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
php	php	8.1.0 ≤ 𝑥 < 8.1.30	ADP
php	php	8.2.0 ≤ 𝑥 < 8.2.24	ADP
php	php	8.3.0 ≤ 𝑥 < 8.3.12	ADP

Debian Releases

Debian Product

Codename

php7.4

bullseye	vulnerable
bullseye (security)	7.4.33-1+deb11u9 fixed

php8.2

bookworm	8.2.29-1~deb12u1 fixed
bookworm (security)	8.2.29-1~deb12u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

php8.1

focal	dne
jammy	Fixed 8.1.2-1ubuntu2.19 released
noble	dne
oracular	dne

php5

focal	dne
jammy	dne
noble	dne
oracular	dne
trusty	Fixed 5.5.9+dfsg-1ubuntu4.29+esm16 released

php7.0

focal	dne
jammy	dne
noble	dne
oracular	dne
xenial	Fixed 7.0.33-0ubuntu0.16.04.16+esm12 released

php7.2

bionic	Fixed 7.2.24-0ubuntu0.18.04.17+esm6 released
focal	dne
jammy	dne
noble	dne
oracular	dne

php7.4

focal	Fixed 7.4.3-4ubuntu2.24 released
jammy	dne
noble	dne
oracular	dne

php8.3

focal	dne
jammy	dne
noble	Fixed 8.3.6-0ubuntu0.24.04.2 released
oracular	Fixed 8.3.11-0ubuntu0.24.10.2 released

openSUSE / SLES Releases

openSUSE Product

Release

apache2-mod_php7

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP7	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP7	7.4.33-150400.4.40.1 fixed

apache2-mod_php8

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php7

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP7	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP7	7.4.33-150400.4.40.1 fixed

php7-bcmath

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-bz2

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-calendar

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-cli

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-ctype

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-curl

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-dba

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-devel

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-dom

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-enchant

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-exif

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-fastcgi

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-fileinfo

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-fpm

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-ftp

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-gd

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-gettext

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-gmp

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-iconv

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-intl

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-json

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-ldap

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-mbstring

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-mysql

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-odbc

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-opcache

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-openssl

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-pcntl

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-pdo

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-pgsql

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-phar

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-posix

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-readline

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-shmop

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-snmp

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-soap

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-sockets

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-sodium

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-sqlite

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-sysvmsg

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-sysvsem

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-sysvshm

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-tidy

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-tokenizer

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-xmlreader

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-xmlrpc

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-xmlwriter

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-xsl

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-zip

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php7-zlib

suse enterprise sap 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise sap 15 SP6	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP4	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP5	7.4.33-150400.4.40.1 fixed
suse enterprise server 15 SP6	7.4.33-150400.4.40.1 fixed

php8

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-bcmath

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-bz2

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-calendar

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-cli

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-ctype

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-curl

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-dba

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-devel

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-dom

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-embed

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-enchant

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-exif

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-fastcgi

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-fileinfo

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-fpm

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-ftp

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-gd

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-gettext

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-gmp

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-iconv

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-intl

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-ldap

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-mbstring

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-mysql

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-odbc

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-opcache

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-openssl

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-pcntl

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-pdo

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-pgsql

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-phar

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-posix

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-readline

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-shmop

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-snmp

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-soap

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-sockets

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-sodium

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-sqlite

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-sysvmsg

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-sysvsem

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-sysvshm

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-test

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-tidy

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-tokenizer

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-xmlreader

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-xmlwriter

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-xsl

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-zip

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

php8-zlib

suse enterprise sap 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise sap 15 SP6	8.2.24-150600.3.6.1 fixed
suse enterprise server 15 SP4	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP5	8.0.30-150400.4.46.1 fixed
suse enterprise server 15 SP6	8.2.24-150600.3.6.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

php

RHEL 9

0:8.0.30-2.el9

fixed

php-bcmath

RHEL 9

0:8.0.30-2.el9

fixed

php-cli

RHEL 9

0:8.0.30-2.el9

fixed

php-common

RHEL 9

0:8.0.30-2.el9

fixed

php-dba

RHEL 9

0:8.0.30-2.el9

fixed

php-dbg

RHEL 9

0:8.0.30-2.el9

fixed

php-devel

RHEL 9

0:8.0.30-2.el9

fixed

php-embedded

RHEL 9

0:8.0.30-2.el9

fixed

php-enchant

RHEL 9

0:8.0.30-2.el9

fixed

php-ffi

RHEL 9

0:8.0.30-2.el9

fixed

php-fpm

RHEL 9

0:8.0.30-2.el9

fixed

php-gd

RHEL 9

0:8.0.30-2.el9

fixed

php-gmp

RHEL 9

0:8.0.30-2.el9

fixed

php-intl

RHEL 9

0:8.0.30-2.el9

fixed

php-ldap

RHEL 9

0:8.0.30-2.el9

fixed

php-mbstring

RHEL 9

0:8.0.30-2.el9

fixed

php-mysqlnd

RHEL 9

0:8.0.30-2.el9

fixed

php-odbc

RHEL 9

0:8.0.30-2.el9

fixed

php-opcache

RHEL 9

0:8.0.30-2.el9

fixed

php-pdo

RHEL 9

0:8.0.30-2.el9

fixed

php-pgsql

RHEL 9

0:8.0.30-2.el9

fixed

php-process

RHEL 9

0:8.0.30-2.el9

fixed

php-snmp

RHEL 9

0:8.0.30-2.el9

fixed

php-soap

RHEL 9

0:8.0.30-2.el9

fixed

php-xml

RHEL 9

0:8.0.30-2.el9

fixed

Known Exploits!

https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp

Common Weakness Enumeration

CWE-1220 - Insufficient Granularity of Access Control
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

References

https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp

https://lists.debian.org/debian-lts-announce/2024/10/msg00011.html

https://security.netapp.com/advisory/ntap-20241101-0003/