PT-2021-7292 · Php+9 · Php+9

Dukk

·

Published

2021-02-14

·

Updated

2025-08-11

·

CVE-2021-21708

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PHP versions 7.4.x through 7.4.27 PHP versions 8.0.x through 8.0.15 PHP versions 8.1.x through 8.1.2
Description The issue is related to the use of filter functions with the FILTER VALIDATE FLOAT filter and min/max limits in PHP. If the filter fails, there is a possibility to trigger the use of allocated memory after it has been freed, which can result in crashes and potentially allow for the overwrite of other memory chunks and remote code execution (RCE). This issue affects code that uses FILTER VALIDATE FLOAT with min/max limits. The exploitation of this issue may allow a remote attacker to execute arbitrary code by providing specially crafted input to an application using the affected PHP function, causing a use-after-free error and leading to a crash of the php-fpm process.
Recommendations For PHP versions 7.4.x through 7.4.27, update to version 7.4.28 or later to resolve the issue. For PHP versions 8.0.x through 8.0.15, update to version 8.0.16 or later to resolve the issue. For PHP versions 8.1.x through 8.1.2, update to version 8.1.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of FILTER VALIDATE FLOAT with min/max limits until a patch is available.

Exploit

Fix

RCE

SSRF

Out of bounds Read

Memory Corruption

Improper Authentication

Heap Based Buffer Overflow

NULL Pointer Dereference

Link Following

Improper Encoding or Escaping of Output

Improper Access Control

Buffer Overflow

Use After Free

Improper Privilege Management

Related Identifiers

ALSA-2022:7624
ALSA-2022:7628
ALSA-2022:8197
ALT-PU-2022-1330
ALT-PU-2022-1331
ALT-PU-2022-1332
ALT-PU-2022-1373
ALT-PU-2022-1386
ALT-PU-2022-1393
ALT-PU-2022-1394
ALT-PU-2022-1396
BDU:2021-03159
BDU:2021-03559
BDU:2021-03703
BDU:2021-05228
BDU:2022-00579
BDU:2022-00685
BDU:2022-03166
BDU:2022-03204
BDU:2022-03205
BDU:2022-03323
BDU:2022-03325
BDU:2022-03326
BDU:2022-03327
BDU:2022-03347
BDU:2022-03386
BDU:2022-03725
BDU:2022-04762
BDU:2022-05350
BDU:2022-05351
BDU:2023-01019
BDU:2024-03775
BIT-LIBPHP-2021-21708
BIT-PHP-2021-21708
BIT-PHP-MIN-2021-21708
CESA-2022_7624
CESA-2022_7628
CVE-2021-21708
DSA-5082-1
OESA-2022-1581
OPENSUSE-SU-2022:0847-1
OPENSUSE-SU-2022_0847-1
OPENSUSE-SU-2022_3997-1
OPENSUSE-SU-2022_4069-1
OPENSUSE-SU-2024:11854-1
OPENSUSE-SU-2024:11861-1
RHSA-2022:7624
RHSA-2022:7628
RHSA-2022:8197
RHSA-2022_7624
RHSA-2022_7628
RHSA-2022_8197
RHSA-2025:3016
RHSA-2025:3076
RLSA-2022:7624
RLSA-2022:7628
RLSA-2022:8197
SUSE-SU-2022:0654-1
SUSE-SU-2022:0847-1
SUSE-SU-2022:3997-1
SUSE-SU-2022:4068-1
SUSE-SU-2022:4069-1
SUSE-SU-2022_0654-1
SUSE-SU-2022_0847-1
USN-5303-1

Affected Products

Alt Linux
Almalinux
Centos
Linuxmint
Php
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu