Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: 2021-0501 Moderate: PHP Memory Access Escalation Fix

mageia
Calendar Grey October 31, 2021
Dist Mageia Esm H88
Mageia 2021-0502 security advisory reveals a critical update for php aimed at resolving vulnerabilities related to privilege escalation and improper memory access.
Updated php packages fix security vulnerability: In PHP versions 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker proces...

Summary

Updated php packages fix security vulnerability:
In PHP versions 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user (CVE-2021-21703).
The php packages have been updated to 8.0.12 that fixes this issue and other bugs.

References

- https://bugs.mageia.org/show_bug.cgi?id=29586

- https://www.php.net/ChangeLog-8.php#8.0.12

- https://www.cve.org/CVERecord?id=CVE-2021-21703

Topics%20covered

Topics Covered

security advisory moderate security update php privilege escalation memory access Mageia

Resolution

SRPMS

- 8/core/php-8.0.12-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 31 Oct 2021
URL: https://advisories.mageia.org/MGASA-2021-0501.html
Type: security
CVE: CVE-2021-21703

Topics%20covered

Topics Covered

security advisory moderate security update php privilege escalation memory access Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here