远程主机上安装的 PHP 版本低于 8.2.18，因此，该应用程序受到版本 8.2.18 公告中提及的多个漏洞影响。

  - 在 PHP 7.4.31 之前版本以及 8.0.24 和 8.1.11 版中，网络和同站攻击者可利用此漏洞在受害者的浏览器中设置标准的不安全 Cookie，而 PHP 应用程序会将其视为 `__Host-` 或 `__Secure-` Cookie。(CVE-2022-31629)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 PHP 版本低于 8.3.6，因此，该应用程序受到版本 8.3.6 公告中提及的多个漏洞影响。

  - 在 PHP 7.4.31 之前版本以及 8.0.24 和 8.1.11 版中，网络和同站攻击者可利用此漏洞在受害者的浏览器中设置标准的不安全 Cookie，而 PHP 应用程序会将其视为 `__Host-` 或 `__Secure-` Cookie。(CVE-2022-31629)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 php81 版本低于 8.1.28 / 8.3.6。因此，如公告 SSA:2024-103-01 所述，其会受到多个漏洞影响。

  - 在 PHP 7.4.31 之前版本以及 8.0.24 和 8.1.11 版中，网络和同站攻击者可利用此漏洞在受害者的浏览器中设置标准的不安全 Cookie，而 PHP 应用程序会将其视为 `__Host-` 或 `__Secure-` Cookie。(CVE-2022-31629)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The version of PHP installed on the remote host is prior to 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.8 advisory.

  - sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-     cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote     attackers to execute arbitrary code by placing command-line options in the query string, related to lack     of skipping a certain php_getopt for the 'd' case. (CVE-2012-1823)

  - In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open()     command with array syntax, due to insufficient escaping, if the arguments of the executed command are     controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in     Windows shell. (CVE-2024-1874)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-     CGI on Windows, if the system is set up to use certain code pages, Windows may use Best-Fit behavior to     replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those     characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and     thus reveal the source code of scripts, run arbitrary PHP code on the server, etc. (CVE-2024-4577)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error,     filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of     URLs the function will result in invalid user information (username + password part of URLs) being treated     as valid user information. This may lead to the downstream code accepting invalid URLs as valid and     parsing them incorrectly. (CVE-2024-5458)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874     does not work if the command name includes trailing spaces. Original issue: when using proc_open() command     with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled     by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.
    (CVE-2024-5585)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php81 installed on the remote host is prior to 8.1.29 / 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-158-01 advisory.

    New php packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the php81 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-39d50cc975 advisory.

    **PHP version 8.2.18** (11 Apr 2024)

    **Core:**

    * Fixed bug [GH-13612](https://github.com/php/php-src/issues/13612) (Corrupted memory in destructor with     weak references). (nielsdos)
    * Fixed bug [GH-13784](https://github.com/php/php-src/issues/13784) (AX_GCC_FUNC_ATTRIBUTE failure).
    (Remi)
    * Fixed bug [GH-13670](https://github.com/php/php-src/issues/13670) (GC does not scale well with a lot of     objects created in destructor). (Arnaud)

    **DOM:**

    * Add some missing ZPP checks. (nielsdos)
    * Fix potential memory leak in XPath evaluation results. (nielsdos)
    * Fix phpdoc for DOMDocument load methods. (VincentLanglet)

    **FPM**

    * Fix incorrect check in fpm_shm_free(). (nielsdos)

    **GD:**

    * Fixed bug [GH-12019](https://github.com/php/php-src/issues/12019) (add GDLIB_CFLAGS in feature tests).
    (Michael Orlitzky)

    **Gettext:**

    * Fixed sigabrt raised with dcgettext/dcngettext calls with gettext 0.22.5 with category set to LC_ALL.
    (David Carlier)

    **MySQLnd:**

    * Fix [GH-13452](https://github.com/php/php-src/issues/13452) (Fixed handshake response [mysqlnd]). (Saki     Takamachi)
    * Fix incorrect charset length in check_mb_eucjpms(). (nielsdos)

    **Opcache:**

    * Fixed [GH-13508](https://github.com/php/php-src/issues/13508) (JITed QM_ASSIGN may be optimized out when     op1 is null). (Arnaud, Dmitry)
    * Fixed [GH-13712](https://github.com/php/php-src/issues/13712) (Segmentation fault for enabled observers     when calling trait method of internal trait when opcache is loaded). (Bob)

    **PDO:**

    * Fix various PDORow bugs. (Girgias)

    **Random:**

    * Fixed bug [GH-13544](https://github.com/php/php-src/issues/13544) (Pre-PHP 8.2 compatibility for     mt_srand with unknown modes). (timwolla)
    * Fixed bug [GH-13690](https://github.com/php/php-src/issues/13690) (Global Mt19937 is not properly reset     in-between requests when MT_RAND_PHP is used). (timwolla)

    **Session:**

    * Fixed bug [GH-13680](https://github.com/php/php-src/issues/13680) (Segfault with session_decode and     compilation error). (nielsdos)

    **Sockets:**

    * Fixed bug [GH-13604](https://github.com/php/php-src/issues/13604) (socket_getsockname returns random     characters in the end of the socket name). (David Carlier)

    **SPL:**

    * Fixed bug [GH-13531](https://github.com/php/php-src/issues/13531) (Unable to resize SplfixedArray after     being unserialized in PHP 8.2.15). (nielsdos)
    * Fixed bug [GH-13685](https://github.com/php/php-src/issues/13685) (Unexpected null pointer in     zend_string.h). (nielsdos)

    **Standard:**

    * Fixed bug [GH-11808](https://github.com/php/php-src/issues/11808) (Live filesystem modified by tests).
    (nielsdos)
    * Fixed [GH-13402](https://github.com/php/php-src/issues/13402) (Added validation of `\n` in     $additional_headers of mail()). (SakiTakamachi)
    * Fixed bug [GH-13203](https://github.com/php/php-src/issues/13203) (file_put_contents fail on strings     over 4GB on Windows). (divinity76)
    * Fixed bug [GHSA-pc52-254m-w9w7](https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7)     (Command injection via array-ish $command parameter of proc_open). (CVE-2024-1874) (Jakub Zelenka)
    * Fixed bug [GHSA-wpj3-hf5j-x4v4](https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4)     (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix). (**CVE-2024-2756**) (nielsdos)
    * Fixed bug [GHSA-h746-cjrr-wfmr](https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr)     (password_verify can erroneously return true, opening ATO risk). (**CVE-2024-3096**) (Jakub Zelenka)

    **XML:**

    * Fixed bug [GH-13517](https://github.com/php/php-src/issues/13517) (Multiple test failures when building     with --with-expat). (nielsdos)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5e8ae0def0 advisory.

    **PHP version 8.3.6** (11 Apr 2024)

    **Core:**

    * Fixed [GH-13569](https://github.com/php/php-src/issues/13569) (GC buffer unnecessarily grows up to     GC_MAX_BUF_SIZE when scanning WeakMaps). (Arnaud)
    * Fixed bug [GH-13612](https://github.com/php/php-src/issues/13612) (Corrupted memory in destructor with     weak references). (nielsdos)
    * Fixed bug [GH-13446](https://github.com/php/php-src/issues/13446) (Restore exception handler after it     finishes). (ilutov)
    * Fixed bug [GH-13784](https://github.com/php/php-src/issues/13784) (AX_GCC_FUNC_ATTRIBUTE failure).
    (Remi)
    * Fixed bug [GH-13670](https://github.com/php/php-src/issues/13670) (GC does not scale well with a lot of     objects created in destructor). (Arnaud)

    **DOM:**

    * Add some missing ZPP checks. (nielsdos)
    * Fix potential memory leak in XPath evaluation results. (nielsdos)

    **FPM:**

    * Fixed [GH-11086](https://github.com/php/php-src/issues/11086) (FPM: config test runs twice in daemonised     mode). (Jakub Zelenka)
    * Fix incorrect check in fpm_shm_free(). (nielsdos)

    **GD:**

    * Fixed bug [GH-12019](https://github.com/php/php-src/issues/12019) (add GDLIB_CFLAGS in feature tests).
    (Michael Orlitzky)

    **Gettext:**

    * Fixed sigabrt raised with dcgettext/dcngettext calls with gettext 0.22.5 with category set to LC_ALL.
    (David Carlier)

    **MySQLnd:**

    * Fix [GH-13452](https://github.com/php/php-src/issues/13452) (Fixed handshake response [mysqlnd]). (Saki     Takamachi)
    * Fix incorrect charset length in check_mb_eucjpms(). (nielsdos)

    **Opcache:**

    * Fixed [GH-13508](https://github.com/php/php-src/issues/13508) (JITed QM_ASSIGN may be optimized out when     op1 is null). (Arnaud, Dmitry)
    * Fixed [GH-13712](https://github.com/php/php-src/issues/13712) (Segmentation fault for enabled observers     when calling trait method of internal trait when opcache is loaded). (Bob)

    **Random:**

    * Fixed bug [GH-13544](https://github.com/php/php-src/issues/13544) (Pre-PHP 8.2 compatibility for     mt_srand with unknown modes). (timwolla)
    * Fixed bug [GH-13690](https://github.com/php/php-src/issues/13690) (Global Mt19937 is not properly reset     in-between requests when MT_RAND_PHP is used). (timwolla)

    **Session:**

    * Fixed bug [GH-13680](https://github.com/php/php-src/issues/13680) (Segfault with session_decode and     compilation error). (nielsdos)

    **SPL:**

    * Fixed bug [GH-13685](https://github.com/php/php-src/issues/13685) (Unexpected null pointer in     zend_string.h). (nielsdos)

    **Standard:**

    * Fixed bug [GH-11808](https://github.com/php/php-src/issues/11808) (Live filesystem modified by tests).
    (nielsdos)
    * Fixed [GH-13402](https://github.com/php/php-src/issues/13402) (Added validation of `\n` in     $additional_headers of mail()). (SakiTakamachi)
    * Fixed bug [GH-13203](https://github.com/php/php-src/issues/13203) (file_put_contents fail on strings     over 4GB on Windows). (divinity76)
    * Fixed bug [GHSA-pc52-254m-w9w7](https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7)     (Command injection via array-ish $command parameter of proc_open). (CVE-2024-1874) (Jakub Zelenka)
    * Fixed bug [GHSA-wpj3-hf5j-x4v4](https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4)     (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix). (**CVE-2024-2756**) (nielsdos)
    * Fixed bug [GHSA-h746-cjrr-wfmr](https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr)     (password_verify can erroneously return true, opening ATO risk). (**CVE-2024-3096**) (Jakub Zelenka) Fixed     bug [GHSA-fjp9-9hwx-59fq](https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq)     (mb_encode_mimeheader runs endlessly for some inputs). (**CVE-2024-2757**) (Alex Dowad)
    * Fix bug [GH-13932](https://github.com/php/php-src/issues/13932) (Attempt to fix mbstring on windows     build) (msvc). (David Carlier)




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートホストにインストールされている PHP のバージョンは、8.2.18 より前のバージョンです。したがって、バージョン 8.2.18のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - 7.4.31、8.0.24 および 8.1.11より前のバージョンの PHP では、この脆弱性により、ネットワークおよび同一サイト攻撃者が、PHP アプリケーションによって「__Host-」または「__Secure-」クッキーとして扱われる標準の安全でないクッキーを被害者のブラウザに設定する可能性があります。(CVE-2022-31629)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートホストにインストールされている PHP のバージョンは、8.3.6 より前のバージョンです。したがって、バージョン 8.3.6のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - 7.4.31、8.0.24 および 8.1.11より前のバージョンの PHP では、この脆弱性により、ネットワークおよび同一サイト攻撃者が、PHP アプリケーションによって「__Host-」または「__Secure-」クッキーとして扱われる標準の安全でないクッキーを被害者のブラウザに設定する可能性があります。(CVE-2022-31629)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートホストにインストールされている php81 のバージョンは、8.1.28 / 8.3.6 より前のバージョンです。したがって、SSA:2024-103-01 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - 7.4.31、8.0.24 および 8.1.11より前のバージョンの PHP では、この脆弱性により、ネットワークおよび同一サイト攻撃者が、PHP アプリケーションによって「__Host-」または「__Secure-」クッキーとして扱われる標準の安全でないクッキーを被害者のブラウザに設定する可能性があります。(CVE-2022-31629)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートホストにインストールされている FreeBSD のバージョンは、テスト済みバージョンより前です。したがって、6d82c5e9-fc24-11ee-a689-04421a1baf97 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - この更新には、3 つのセキュリティ修正が含まれます。(CVE-2024-1874、CVE-2024-2756、CVE-2024-2757、CVE-2024-3096)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of PHP installed on the remote host is prior to 8.2.18. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.18 advisory.

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or     `__Secure-` cookie by PHP applications. (CVE-2022-31629)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.3.6. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.6 advisory.

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or     `__Secure-` cookie by PHP applications. (CVE-2022-31629)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php81 installed on the remote host is prior to 8.1.28 / 8.3.6. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-103-01 advisory.

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or     `__Secure-` cookie by PHP applications. (CVE-2022-31629)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6d82c5e9-fc24-11ee-a689-04421a1baf97 advisory.

  - This update includes 3 security fixes: (CVE-2024-1874, CVE-2024-2756, CVE-2024-2757, CVE-2024-3096)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1874 advisory.

  - In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open()     command with array syntax, due to insufficient escaping, if the arguments of the executed command are     controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in     Windows shell. (CVE-2024-1874)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
193191	PHP 8.2.x < 8.2.18 多个漏洞	Nessus	CGI abuses	2024/4/11	2025/5/26	medium
193201	PHP 8.3.x < 8.3.6 多个漏洞	Nessus	CGI abuses	2024/4/11	2025/5/26	medium
193284	Slackware Linux 15.0/当前 php81 多个漏洞 (SSA:2024-103-01)	Nessus	Slackware Local Security Checks	2024/4/12	2024/6/14	medium
200161	PHP 8.3.x < 8.3.8 Multiple Vulnerabilities	Nessus	CGI abuses	2024/6/6	2025/5/26	critical
200177	Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-158-01)	Nessus	Slackware Local Security Checks	2024/6/6	2024/10/4	critical
193553	Fedora 38 : php (2024-39d50cc975)	Nessus	Fedora Local Security Checks	2024/4/19	2024/11/14	medium
194645	Fedora 40 : php (2024-5e8ae0def0)	Nessus	Fedora Local Security Checks	2024/4/29	2024/11/14	medium
193191	PHP 8.2.x < 8.2.18 の複数の脆弱性	Nessus	CGI abuses	2024/4/11	2025/5/26	medium
193201	PHP 8.3.x< 8.3.6の複数の脆弱性	Nessus	CGI abuses	2024/4/11	2025/5/26	medium
193284	Slackware Linux 15.0 / 最新の php81 の複数の脆弱性 (SSA:2024-103-01)	Nessus	Slackware Local Security Checks	2024/4/12	2024/6/14	medium
193406	FreeBSD : php -- 複数の脆弱性 (6d82c5e9-fc24-11ee-a689-04421a1baf97)	Nessus	FreeBSD Local Security Checks	2024/4/17	2024/7/22	critical
193191	PHP 8.2.x < 8.2.18 Multiple Vulnerabilities	Nessus	CGI abuses	2024/4/11	2025/5/26	medium
193201	PHP 8.3.x < 8.3.6 Multiple Vulnerabilities	Nessus	CGI abuses	2024/4/11	2025/5/26	medium
193284	Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-103-01)	Nessus	Slackware Local Security Checks	2024/4/12	2024/6/14	medium
193406	FreeBSD : php -- Multiple vulnerabilities (6d82c5e9-fc24-11ee-a689-04421a1baf97)	Nessus	FreeBSD Local Security Checks	2024/4/17	2024/7/22	critical
201258	CBL Mariner 2.0 Security Update: php (CVE-2024-1874)	Nessus	MarinerOS Local Security Checks	2024/7/2	2024/7/22	critical

检测

插件搜索

medium

medium

medium

critical

critical

medium

medium

medium

medium

medium

critical

medium

medium

medium

critical

critical