Skip to content
OpenAdvisories
High USN-5303-1 1 CVE

php7.4, php8.0 vulnerability

Published Feb 28, 2022 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that PHP incorrectly handled certain scripts.
An attacker could possibly use this issue to cause a denial of service,
or possibly execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS php7.4 7.4.3-4ubuntu2.9

Vulnerabilities 1

  • High 8.2
    CVE-2021-21708

    UAF due to php_filter_float() failing

    In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which c…

    PHP Group PHP php7 php7.4 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2021-21708