The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7400-1 advisory.

    It was discovered that PHP incorrectly handle certain inputs. An attacker could possibly use this issue to     cause a crash or execute arbitrary code. (CVE-2024-11235)

    It was discovered that PHP incorrectly handle certain folded headers. An attacker could possibly use this     issue to cause a crash or execute arbritrary code. (CVE-2025-1217)

    It was discovered that PHP incorrectly handled certain headers. An attacker could possibly use this issue     to expose sensitive information or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS     Ubuntu 24.10, and Ubuntu 24.04 LTS. (CVE-2025-1219)

    It was discovered that PHP incorrectly handle certain headers with invalid name and no colon. An attacker     could possibly use this issue to confuse applications into accepting invalid headers causing code     injection. (CVE-2025-1734)

    It was discovered that PHP incorrectly handled certain headers. An attacker could possibly use this issue     to cause a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.10, and Ubuntu 24.04     LTS. (CVE-2025-1736)

    It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue     to expose sensitive information. (CVE-2025-1861)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.5 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7418 advisory.

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
      * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
      * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
      * php: libxml streams use wrong content-type header when requesting a redirected resource     (CVE-2025-1219)
      * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)
      * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1025-1 advisory.

    - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666)
    - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664)
    - CVE-2025-1219: Fixed libxml streams using wrong content-type header when requesting a redirected     resource (bsc#1239667)
    - CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon     (bsc#1239668)
    - CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670)
    - CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7418 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

    * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7489 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

    * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7489 advisory.

    [8.3.19-1]
    - rebase to 8.3.19

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7418 advisory.

    php     [8.3.19-1]
    - rebase to 8.3.19

    [8.3.15-1]
    - rebase to 8.3.15

    [8.3.12-1]
    - rebase to 8.3.12 RHEL-62189
    - enable command history in phpdbg
    - backport Argon2 password hashing in OpenSSL ext
    - build sockets extension statically
    - switch to nikic/php-parser version 5
    - openssl: always warn about missing curve_name

    [8.2.13-1]
    - rebase to 8.2.13 RHEL-14699
    - add %__phpize and %__phpconfig macros
    - move httpd/nginx wants directives to config files in /etc
    - php-fpm.conf: move include directive after [global] section       following upstream example, allowing overriding
    - use SPDX license IDs

    php-pecl-apcu     php-pecl-redis6     [6.1.0-2]
    - ignore 1 ONLINE test

    [6.1.0-1]
    - RHEL build

    [6.1.0-1]
    - update to 6.1.0
    - drop patch merged upstream

    [6.1.0~RC2-1]
    - update to 6.1.0RC2
    - fix test suite with redis 6.2 using patch from       https://github.com/phpredis/phpredis/pull/2555

    [6.0.2-3]
    - cleanup and modernize spec file

    [6.0.2-2]
    - use valkey on Fedora 41
    - add upstream patch for PHP 8.4

    [6.0.2-1]
    - update to 6.0.2

    [6.0.1-1]
    - update to 6.0.1

    [6.0.0-1]
    - cleanup SCL stuff for Fedora review

    [6.0.0-1]     php-pecl-rrd     php-pecl-xdebug3     [3.3.1-1]
    - update to 3.3.1 for PHP 8.3

    php-pecl-zip

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7418 advisory.

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

    * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??=     operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the     memory layout leading to this, for example by supplying specially crafted inputs to the script, it could     lead to remote code execution. (CVE-2024-11235)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0994-1 advisory.

    - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666)
    - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664)
    - CVE-2025-1219: Fixed libxml streams using wrong content-type header when requesting a redirected     resource (bsc#1239667)
    - CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon     (bsc#1239668)
    - CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670)
    - CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1012-1 advisory.

    - CVE-2025-1217: Fixed header parser of `http` stream wrapper not handling folded headers (bsc#1239664)
    - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666)
    - CVE-2025-1219: Fixed libxml streams using wrong `content-type` header when requesting a redirected     resource (bsc#1239667)
    - CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon     (bsc#1239668)
    - CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669)
    - CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670)

    Version update to 8.2.28:
        Core:
            Fixed bug GH-17211 (observer segfault on function loaded with dl()).
        LibXML:
            Fixed GHSA-wg4p-4hqh-c3g9.
            Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a     redirected resource).
        Streams:
            Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header).
            Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes).
            Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon).
            Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers).

    Version update version 8.2.27         Calendar:
            Fixed jdtogregorian overflow.
            Fixed cal_to_jd julian_days argument overflow.
        COM:
            Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
        Core:
            Fail early in *nix configuration build script.
            Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
            Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
            Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
            Fix is_zend_ptr() huge block comparison.
            Fixed potential OOB read in zend_dirname() on Windows.
        Curl:
            Fix various memory leaks in curl mime handling.
        FPM:
            Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
        GD:
            Fixed GH-16776 (imagecreatefromstring overflow).
        GMP:
            Revert gmp_pow() overly restrictive overflow checks.
        Hash:
            Fixed GH-16711: Segfault in mhash().
        Opcache:
            Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF).
            Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
            Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64).
        OpenSSL:
            Prevent unexpected array entry conversion when reading key.
            Fix various memory leaks related to openssl exports.
            Fix memory leak in php_openssl_pkey_from_zval().
        PDO:
            Fixed memory leak of `setFetchMode()`.
        Phar:
            Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
        PHPDBG:
            Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
        SAPI:
            Fixed bug GH-16998 (UBSAN warning in rfc1867).
        SimpleXML:
            Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element     input).
        SNMP:
            Fixed bug GH-16959 (snmget modifies the object_id array).
        Standard:
            Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
        Streams:
            Fixed network connect poll interuption handling.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-922 advisory.

    NOTE:https://github.com/php/php-src/security/advisories/GHSA-     rwp7-7vc6-8477https://www.tenable.com/cve/CVE-2024-11235

    VersionThis vulnerability is present only in PHP 8.3+. The PHP 8.2 and versions before are not impacted.()     (CVE-2024-11235)

    Header parser of `http` stream wrapper does not handle folded headers. (CVE-2025-1217)

    When requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is     used to determine the charset when the requested resource performs a redirect. (CVE-2025-1219)

    Streams HTTP wrapper does not fail for headers with invalid name and no colon. (CVE-2025-1734)

    Stream HTTP wrapper header check might omit basic auth header. (CVE-2025-1736)

    Stream HTTP wrapper truncate redirect location to 1024 bytes (CVE-2025-1861)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
233593	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : PHP vulnerabilities (USN-7400-1)	Nessus	Ubuntu Local Security Checks	2025/4/1	2025/9/3	medium
232705	PHP 8.4.x < 8.4.5 Multiple Vulnerabilities	Nessus	CGI abuses	2025/3/13	2026/1/21	high
241241	AlmaLinux 9 : php:8.3 (ALSA-2025:7418)	Nessus	Alma Linux Local Security Checks	2025/7/3	2025/7/3	medium
233397	SUSE SLES15 / openSUSE 15 Security Update : php7 (SUSE-SU-2025:1025-1)	Nessus	SuSE Local Security Checks	2025/3/27	2026/1/21	high
235935	RHEL 9 : php:8.3 (RHSA-2025:7418)	Nessus	Red Hat Local Security Checks	2025/5/14	2025/6/5	critical
237826	RHEL 10 : php (RHSA-2025:7489)	Nessus	Red Hat Local Security Checks	2025/6/5	2025/6/5	critical
240859	Oracle Linux 10 : php (ELSA-2025-7489)	Nessus	Oracle Linux Local Security Checks	2025/6/27	2026/1/21	critical
237203	Oracle Linux 9 : php:8.3 (ELSA-2025-7418)	Nessus	Oracle Linux Local Security Checks	2025/5/23	2026/1/21	medium
243161	RockyLinux 9 : php:8.3 (RLSA-2025:7418)	Nessus	Rocky Linux Local Security Checks	2025/7/30	2025/7/30	medium
250951	Linux Distros Unpatched Vulnerability : CVE-2024-11235	Nessus	Misc.	2025/8/18	2025/8/18	high
233313	SUSE SLES15 Security Update : php8 (SUSE-SU-2025:0994-1)	Nessus	SuSE Local Security Checks	2025/3/25	2026/1/21	high
233342	SUSE SLES15 / openSUSE 15 Security Update : php8 (SUSE-SU-2025:1012-1)	Nessus	SuSE Local Security Checks	2025/3/26	2026/1/21	high
233717	Amazon Linux 2023 : php8.3, php8.3-bcmath, php8.3-cli (ALAS2023-2025-922)	Nessus	Amazon Linux Local Security Checks	2025/4/1	2025/4/1	medium

检测

插件搜索

medium

high

medium

high

critical

critical

critical

medium

medium

high

high

high

medium