PT-2021-3510 · Php+6 · Php+6
Trichimtrich
·
Published
2021-06-29
·
Updated
2025-08-11
·
CVE-2021-21704
CVSS v2.0
5.4
Medium
| Vector | AV:N/AC:H/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
PHP versions 7.3.x through 7.3.28
PHP versions 7.4.x through 7.4.20
PHP versions 8.0.x through 8.0.7
Description
The issue is related to insufficient input validation in the Firebird PDO driver extension. A malicious database server could cause crashes in various database functions, such as
getAttribute(), execute(), fetch(), and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service, or potentially memory corruption.Recommendations
For PHP versions 7.3.x through 7.3.28, update to version 7.3.29 or later.
For PHP versions 7.4.x through 7.4.20, update to version 7.4.21 or later.
For PHP versions 8.0.x through 8.0.7, update to version 8.0.8 or later.
Exploit
Fix
DoS
Memory Corruption
RCE
Integer Overflow
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Php
Red Os
Suse
Ubuntu