CVE-2023-3823

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2023-3823
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2023-08-11 06:15:00 UTC
Updated2023-10-27 18:58:00 UTC
DescriptionIn PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling appropriate function. However, since the state is process-global, other modules - such as ImageMagick - may also use this library within the same process, and change that global state for their internal purposes, and leave it in a state where external entities loading is enabled. This can lead to the situation where external XML is parsed with external entities loaded, which can lead to disclosure of any local files accessible to PHP. This vulnerable state may persist in the same process across many requests, until the process is shut down. 

Risk And Classification

Problem Types: CWE-611

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Debian Debian Linux 10.0 All All All
Operating System Fedoraproject Fedora 38 All All All
Application Php Php All All All All

References

ReferenceSourceLinkTags
August 2023 PHP Vulnerabilities in NetApp Products | NetApp Product Security MISC security.netapp.com
[SECURITY] Fedora 38 Update: php-8.2.9-2.fc38 - package-announce - Fedora Mailing-Lists MISC lists.fedoraproject.org
Security issue with external entity loading in XML without enabling it · Advisory · php/php-src · GitHub MISC github.com
[SECURITY] [DLA 3555-1] php7.3 security update MISC lists.debian.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 161008 Oracle Enterprise Linux Security Update for Hypertext Preprocessor (PHP) (ELSA-2023-5926)
  • 161015 Oracle Enterprise Linux Security Update for php:8.0 (ELSA-2023-5927)
  • 161313 Oracle Enterprise Linux Security Update for php:8.1 (ELSA-2024-0387)
  • 199676 Ubuntu Security Notification for Hypertext Preprocessor (PHP) Vulnerabilities (USN-6305-1)
  • 200142 Ubuntu Security Notification for Hypertext Preprocessor (PHP) Vulnerabilities (USN-6305-2)
  • 242223 Red Hat Update for Hypertext Preprocessor (PHP) (RHSA-2023:5926)
  • 242227 Red Hat Update for php:8.0 (RHSA-2023:5927)
  • 242739 Red Hat Update for php:8.1 (RHSA-2024:0387)
  • 284381 Fedora Security Update for Hypertext Preprocessor (PHP) (FEDORA-2023-c68f2227e6)
  • 284393 Fedora Security Update for Hypertext Preprocessor (PHP) (FEDORA-2023-984c26961f)
  • 356065 Amazon Linux Security Advisory for Hypertext Preprocessor (PHP) : ALASPHP8.2-2023-002
  • 356069 Amazon Linux Security Advisory for Hypertext Preprocessor (PHP) : ALASPHP8.0-2023-009
  • 356073 Amazon Linux Security Advisory for Hypertext Preprocessor (PHP) : ALASPHP8.1-2023-004
  • 356078 Amazon Linux Security Advisory for Hypertext Preprocessor (PHP) : ALASPHP8.2-2023-002
  • 356084 Amazon Linux Security Advisory for Hypertext Preprocessor (PHP) : ALASPHP8.1-2023-004
  • 356089 Amazon Linux Security Advisory for Hypertext Preprocessor (PHP) : ALASPHP8.0-2023-009
  • 38910 Hypertext Preprocessor (PHP) Multiple Vulnerabilities
  • 503088 Alpine Linux Security Update for php81
  • 503096 Alpine Linux Security Update for php8
  • 503854 Alpine Linux Security Update for php81
  • 6000162 Debian Security Update for php7.3 (DLA 3555-1)
  • 6000571 Debian Security Update for php8.2 (DSA 5661-1)
  • 674053 EulerOS Security Update for Hypertext Preprocessor (PHP) (EulerOS-SA-2024-1288)
  • 941313 AlmaLinux Security Update for php:8.0 (ALSA-2023:5927)
  • 941321 AlmaLinux Security Update for Hypertext Preprocessor (PHP) (ALSA-2023:5926)
  • 941553 AlmaLinux Security Update for php:8.1 (ALSA-2024:0387)
  • 961052 Rocky Linux Security Update for Hypertext Preprocessor (PHP) (RLSA-2023:5926)
  • 961062 Rocky Linux Security Update for php:8.0 (RLSA-2023:5927)
  • 961115 Rocky Linux Security Update for php:8.1 (RLSA-2024:0387)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report