Related Vulnerabilities: CVE-2021-21703  

A security issue was found in PHP before versions 8.0.12 and 7.4.25 in the PHP-FPM component. An out-of-bounds read/write in the root FPM at arbitrary locations using pointers located in the SHM can lead to a privilege escalation from www-data to root.

Severity Medium

Remote No

Type Privilege escalation

Description

A security issue was found in PHP before versions 8.0.12 and 7.4.25 in the PHP-FPM component. An out-of-bounds read/write in the root FPM at arbitrary locations using pointers located in the SHM can lead to a privilege escalation from www-data to root.

AVG-2487 php7 7.4.24-2 7.4.25-1 Medium Fixed

AVG-2486 php 8.0.11-2 8.0.12-1 Medium Fixed

https://www.php.net/ChangeLog-8.php#8.0.12
https://bugs.php.net/bug.php?id=81026
https://github.com/php/php-src/commit/ea58ca0aff4ba3e82f926863e5f997d5fd3371f3
https://github.com/php/php-src/commit/81bf9b1a9f6def4a6f742a6b41ddc92005ab638f