Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-21703

Fixed in a distro release EPSS 1%CVSS 7.8

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.

Published 2021-10-25 · CVE record · OSV

Products: PHP Group PHP

Distro releases

ReleasePackageFixed in
AlmaLinux 8apcu-panel5.1.18-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8libzip1.6.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8libzip-devel1.6.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8libzip-tools1.6.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8php7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-bcmath7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-cli7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-common7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-dba7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-dbg7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-devel7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-embedded7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-enchant7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-ffi7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-fpm7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-gd7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-gmp7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-intl7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-json7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-ldap7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-mbstring7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-mysqlnd7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-odbc7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-opcache7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pdo7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pear1:1.10.12-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pecl-apcu5.1.18-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pecl-apcu-devel5.1.18-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pecl-rrd2.0.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pecl-xdebug2.9.5-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pecl-zip1.18.2-1.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-pgsql7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-process7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-snmp7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-soap7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-xml7.4.19-2.module_el8.6.0+2750+78feabcb
AlmaLinux 8php-xmlrpc7.4.19-2.module_el8.6.0+2750+78feabcb
Arch Linuxphp8.0.12-1
Debian 10php7.37.3.31-1~deb10u1
Debian 11php7.47.4.25-1+deb11u1
Debian 9php7.07.0.33-0+deb9u12
Red Hat Enterprise Linux 8apcu-panel0:5.1.18-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8libzip0:1.6.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8libzip-debuginfo0:1.6.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8libzip-debugsource0:1.6.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8libzip-devel0:1.6.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8libzip-tools0:1.6.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8libzip-tools-debuginfo0:1.6.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-bcmath0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-bcmath-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-cli0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-cli-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-common0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-common-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-dba0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-dba-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-dbg0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-dbg-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-debugsource0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-devel0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-embedded0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-embedded-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-enchant0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-enchant-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-ffi0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-ffi-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-fpm0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-fpm-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-gd0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-gd-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-gmp0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-gmp-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-intl0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-intl-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-json0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-json-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-ldap0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-ldap-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-mbstring0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-mbstring-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-mysqlnd0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-mysqlnd-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-odbc0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-odbc-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-opcache0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-opcache-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-pdo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-pdo-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-pear1:1.10.12-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-apcu0:5.1.18-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-apcu-debuginfo0:5.1.18-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-apcu-debugsource0:5.1.18-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-apcu-devel0:5.1.18-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-rrd0:2.0.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-rrd-debuginfo0:2.0.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-rrd-debugsource0:2.0.1-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-xdebug0:2.9.5-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-xdebug-debuginfo0:2.9.5-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-xdebug-debugsource0:2.9.5-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-zip0:1.18.2-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-zip-debuginfo0:1.18.2-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pecl-zip-debugsource0:1.18.2-1.module+el8.3.0+6678+b09f589e
Red Hat Enterprise Linux 8php-pgsql0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-pgsql-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-process0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-process-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-snmp0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-snmp-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-soap0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-soap-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-xml0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-xml-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-xmlrpc0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat Enterprise Linux 8php-xmlrpc-debuginfo0:7.4.19-2.module+el8.6.0+13953+0a59ce9f
Red Hat rhel software collections 3rh-php73-php0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-bcmath0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-cli0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-common0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-dba0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-dbg0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-debuginfo0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-devel0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-embedded0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-enchant0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-fpm0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-gd0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-gmp0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-intl0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-json0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-ldap0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-mbstring0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-mysqlnd0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-odbc0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-opcache0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-pdo0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-pgsql0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-process0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-pspell0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-recode0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-snmp0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-soap0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-xml0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-xmlrpc0:7.3.33-1.el7
Red Hat rhel software collections 3rh-php73-php-zip0:7.3.33-1.el7
Rocky Linux 8libzip0:1.6.1-1.module+el8.6.0+789+2130c178
Rocky Linux 8libzip0:1.6.1-1.module+el8.4.0+415+e936cba3
Rocky Linux 8php0:7.4.19-2.module+el8.6.0+789+2130c178
Rocky Linux 8php-pear1:1.10.12-1.module+el8.4.0+415+e936cba3
Rocky Linux 8php-pear1:1.10.12-1.module+el8.6.0+789+2130c178
Rocky Linux 8php-pecl-apcu0:5.1.18-1.module+el8.6.0+789+2130c178
Rocky Linux 8php-pecl-apcu0:5.1.18-1.module+el8.4.0+415+e936cba3
Rocky Linux 8php-pecl-rrd0:2.0.1-1.module+el8.4.0+414+2e7afcdd
Rocky Linux 8php-pecl-xdebug0:2.9.5-1.module+el8.4.0+415+e936cba3
Rocky Linux 8php-pecl-zip0:1.18.2-1.module+el8.6.0+789+2130c178
Rocky Linux 8php-pecl-zip0:1.18.2-1.module+el8.4.0+415+e936cba3
SUSE Enterprise Storage 6php77.2.5-4.89.4
SUSE Enterprise Storage 6php77.2.34-150000.4.103.1
SUSE Enterprise Storage 7php77.4.33-150200.3.46.2
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSphp77.2.34-150000.4.103.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSphp77.2.5-4.89.4
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSphp77.2.5-4.89.4
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSphp77.2.34-150000.4.103.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSphp77.4.33-150200.3.46.2
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSphp77.4.33-150200.3.46.2
SUSE Linux Enterprise High Performance Computing 15-ESPOSphp77.2.34-150000.4.103.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSphp77.2.5-4.89.4
SUSE Linux Enterprise High Performance Computing 15-LTSSphp77.2.34-150000.4.103.1
SUSE Linux Enterprise High Performance Computing 15-LTSSphp77.2.5-4.89.4
SUSE Linux Enterprise Module for Package Hub 15 SP2php77.4.6-3.29.1
SUSE Linux Enterprise Module for Package Hub 15 SP3php77.4.6-3.29.1
SUSE Linux Enterprise Module for Package Hub 15 SP3php77.4.33-150200.3.46.2
SUSE Linux Enterprise Module for Web and Scripting 12php727.2.5-1.72.1
SUSE Linux Enterprise Module for Web and Scripting 12php747.4.6-1.27.1
SUSE Linux Enterprise Module for Web and Scripting 12php747.4.33-1.47.2
SUSE Linux Enterprise Module for Web and Scripting 15 SP2php77.4.6-3.29.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP3php77.4.33-150200.3.46.2
SUSE Linux Enterprise Module for Web and Scripting 15 SP3php77.4.6-3.29.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP4apache2-mod_php88.0.24-150400.4.14.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP4php88.0.24-150400.4.14.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP4php8-embed8.0.24-150400.4.14.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP4php8-fastcgi8.0.24-150400.4.14.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP4php8-fpm8.0.24-150400.4.14.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP4php8-test8.0.24-150400.4.14.1
SUSE Linux Enterprise Server 15 SP1-BCLphp77.2.5-4.89.4
SUSE Linux Enterprise Server 15 SP1-BCLphp77.2.34-150000.4.103.1
SUSE Linux Enterprise Server 15 SP1-LTSSphp77.2.34-150000.4.103.1
SUSE Linux Enterprise Server 15 SP1-LTSSphp77.2.5-4.89.4
SUSE Linux Enterprise Server 15 SP2-BCLphp77.4.33-150200.3.46.2
SUSE Linux Enterprise Server 15 SP2-LTSSphp77.4.33-150200.3.46.2
SUSE Linux Enterprise Server 15-LTSSphp77.2.5-4.89.4
SUSE Linux Enterprise Server 15-LTSSphp77.2.34-150000.4.103.1
SUSE Linux Enterprise Server for SAP Applications 15php77.2.5-4.89.4
SUSE Linux Enterprise Server for SAP Applications 15php77.2.34-150000.4.103.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1php77.2.34-150000.4.103.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1php77.2.5-4.89.4
SUSE Linux Enterprise Server for SAP Applications 15 SP2php77.4.33-150200.3.46.2
SUSE Linux Enterprise Software Development Kit 12 SP5php727.2.5-1.72.1
SUSE Linux Enterprise Software Development Kit 12 SP5php747.4.6-1.27.1
SUSE Linux Enterprise Software Development Kit 12 SP5php747.4.33-1.47.2
SUSE Manager Proxy 4.1php77.4.33-150200.3.46.2
SUSE Manager Retail Branch Server 4.1php77.4.33-150200.3.46.2
SUSE Manager Server 4.1php77.4.33-150200.3.46.2
Ubuntu 18.04 LTSphp7.27.2.24-0ubuntu0.18.04.10
Ubuntu 20.04 LTSphp7.47.4.3-4ubuntu2.7
Ubuntu Pro 14.04 LTSphp55.5.9+dfsg-1ubuntu4.29+esm15
Ubuntu Pro 16.04 LTSphp7.07.0.33-0ubuntu0.16.04.16+esm2
openSUSE Leap 15.2php77.4.6-lp152.2.21.1
openSUSE Leap 15.2php7-test7.4.6-lp152.2.21.1
openSUSE Leap 15.3php77.4.33-150200.3.46.2
openSUSE Leap 15.3php77.4.6-3.29.1
openSUSE Leap 15.3php7-test7.4.6-3.29.1
openSUSE Leap 15.3php7-test7.4.33-150200.3.46.2
openSUSE Leap 15.4apache2-mod_php88.0.24-150400.4.14.1
openSUSE Leap 15.4php77.4.33-150200.3.46.2
openSUSE Leap 15.4php77.2.34-150000.4.103.1
openSUSE Leap 15.4php88.0.24-150400.4.14.1
openSUSE Leap 15.4php8-embed8.0.24-150400.4.14.1
openSUSE Leap 15.4php8-fastcgi8.0.24-150400.4.14.1
openSUSE Leap 15.4php8-fpm8.0.24-150400.4.14.1
openSUSE Leap 15.4php8-test8.0.24-150400.4.14.1
openSUSE Tumbleweedphp77.4.25-1.1
openSUSE Tumbleweedphp88.0.12-1.1