Test ID:	1.3.6.1.4.1.25623.1.0.117753
Category:	Web application abuses
Title:	PHP 5.3.7 - 7.3.31, 7.4.x < 7.4.25, 8.0.x < 8.0.12 Security Update (Oct 2021) - Windows
Summary:	PHP released new versions which includes a security fix.
Description:	Summary: PHP released new versions which includes a security fix. Vulnerability Insight: Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation). Affected Software/OS: PHP versions 5.3.7 through 7.3.31, 7.4.x through 7.4.24 and 8.0.x through 8.0.11. Note: While the referenced CVE is only listing PHP 7.3.x, 7.4.x and 8.0.x as affected the security research team is stating in the linked blog post that all versions down to 5.3.7 are affected. Solution: Update to version 7.3.32 (not released yet), 7.4.25, 8.0.12 or later. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-21703 https://security.netapp.com/advisory/ntap-20211118-0003/ Debian Security Information: DSA-4992 (Google Search) https://www.debian.org/security/2021/dsa-4992 Debian Security Information: DSA-4993 (Google Search) https://www.debian.org/security/2021/dsa-4993 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PZVLICZUJMXOGWOUWSBAEGIVTF6Y6V3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBM3KKB3RY2YPOKNMC4HIH7IH3T3WC74/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO5RA6YOBGGGKLIA6F6BQRZDDECF5L3R/ https://security.gentoo.org/glsa/202209-20 https://bugs.php.net/bug.php?id=81026 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://lists.debian.org/debian-lts-announce/2021/10/msg00021.html http://www.openwall.com/lists/oss-security/2021/10/26/7
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.