Skip to content
OpenAdvisories
High DLA-2794-1 1 CVE

php7.0 - security update

Published Oct 27, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 php7.0 7.0.33-0+deb9u12

Vulnerabilities 1

  • High 7.8

    PHP-FPM memory access in root process leading to privilege escalation

    In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child proc…