远程主机上安装的 php81 版本低于 8.1.29 / 8.3.8。因此，如公告 SSA:2024-158-01 所述，其会受到多个漏洞影响。

    为 Slackware 15.0 和当前版本提供了用于修复安全问题的新 php 程序包。

Tenable 已直接从 php81 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 php81 版本低于 8.1.30。因此，如公告 SSA:2024-297-01 所述，其会受到多个漏洞影响。

    为 Slackware 15.0 提供了用于修复安全问题的新 php81 程序包。

Tenable 已直接从 php81 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7c800c4df7 advisory.

    **PHP version 8.2.24** (26 Sep 2024)

    **CGI:**

    * Fixed bug [GHSA-p99j-rfp4-xqvq](https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq)     (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (**CVE-2024-8926**) (nielsdos)
    * Fixed bug [GHSA-94p6-54jq-9mwp](https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp)     (cgi.force_redirect configuration is bypassable due to the environment variable collision).
    (**CVE-2024-8927**) (nielsdos)

    **Core:**

    * Fixed bug [GH-15408](https://github.com/php/php-src/issues/15408) (MSan false-positve on     zend_max_execution_timer). (zeriyoshi)
    * Fixed bug [GH-15515](https://github.com/php/php-src/issues/15515) (Configure error grep illegal option     q). (Peter Kokot)
    * Fixed bug [GH-15514](https://github.com/php/php-src/issues/15514) (Configure error: genif.sh: syntax     error). (Peter Kokot)
    * Fixed bug [GH-15565](https://github.com/php/php-src/issues/15565) (--disable-ipv6 during compilation     produces error EAI_SYSTEM not found). (nielsdos)
    * Fixed bug [GH-15587](https://github.com/php/php-src/issues/15587) (CRC32 API build error on arm 32-bit).
    (Bernd Kuhls, Thomas Petazzoni)
    * Fixed bug [GH-15330](https://github.com/php/php-src/issues/15330) (Do not scan generator frames more     than once). (Arnaud)
    * Fixed uninitialized lineno in constant AST of internal enums. (ilutov)

    **Curl:**

    * FIxed bug [GH-15547](https://github.com/php/php-src/issues/15547) (curl_multi_select overflow on timeout     argument). (David Carlier)

    **DOM:**

    * Fixed bug [GH-15551](https://github.com/php/php-src/issues/15551) (Segmentation fault (access null     pointer) in ext/dom/xml_common.h). (nielsdos)

    **Fileinfo:**

    * Fixed bug [GH-15752](https://github.com/php/php-src/issues/15752) (Incorrect error message for     finfo_file with an empty filename argument). (DanielEScherzer)

    **FPM:**

    * Fixed bug [GHSA-865w-9rf3-2wh5](https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5)     (Logs from childrens may be altered). (**CVE-2024-9026**) (Jakub Zelenka)

    **MySQLnd:**

    * Fixed bug [GH-15432](https://github.com/php/php-src/issues/15432) (Heap corruption when querying a     vector). (cmb, Kamil Tekiela)

    **Opcache:**

    * Fixed bug [GH-15661](https://github.com/php/php-src/issues/15661) (Access null pointer in     Zend/Optimizer/zend_inference.c). (nielsdos)
    * Fixed bug [GH-15658](https://github.com/php/php-src/issues/15658) (Segmentation fault in     Zend/zend_vm_execute.h). (nielsdos)

    **SAPI:**

    * Fixed bug [GHSA-9pqp-7h25-4f32](https://github.com/php/php-src/security/advisories/GHSA-9pqp-7h25-4f32)     (Erroneous parsing of multipart form data). (**CVE-2024-8925**) (Arnaud)

    **SOAP:**

    * Fixed bug php#73182 (PHP SOAPClient does not support stream context HTTP headers in array form).
    (nielsdos)

    **Standard:**

    * Fixed bug [GH-15552](https://github.com/php/php-src/issues/15552) (Signed integer overflow in     ext/standard/scanf.c). (cmb)

    **Streams:**

    * Fixed bug [GH-15628](https://github.com/php/php-src/issues/15628) (php_stream_memory_get_buffer() not     zero-terminated). (cmb)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php81 installed on the remote host is prior to 8.1.30. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-297-01 advisory.

    New php81 packages are available for Slackware 15.0 to fix security issues.

Tenable has extracted the preceding description block directly from the php81 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a03b06dbd0 advisory.

    **PHP version 8.3.12** (26 Sep 2024)

    **CGI:**

    * Fixed bug [GHSA-p99j-rfp4-xqvq](https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq)     (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (**CVE-2024-8926**) (nielsdos)
    * Fixed bug [GHSA-94p6-54jq-9mwp](https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp)     (cgi.force_redirect configuration is bypassable due to the environment variable collision).
    (**CVE-2024-8927**) (nielsdos)

    **Core:**

    * Fixed bug [GH-15408](https://github.com/php/php-src/issues/15408) (MSan false-positve on     zend_max_execution_timer). (zeriyoshi)
    * Fixed bug [GH-15515](https://github.com/php/php-src/issues/15515) (Configure error grep illegal option     q). (Peter Kokot)
    * Fixed bug [GH-15514](https://github.com/php/php-src/issues/15514) (Configure error: genif.sh: syntax     error). (Peter Kokot)
    * Fixed bug [GH-15565](https://github.com/php/php-src/issues/15565) (--disable-ipv6 during compilation     produces error EAI_SYSTEM not found). (nielsdos)
    * Fixed bug [GH-15587](https://github.com/php/php-src/issues/15587) (CRC32 API build error on arm 32-bit).
    (Bernd Kuhls, Thomas Petazzoni)
    * Fixed bug [GH-15330](https://github.com/php/php-src/issues/15330) (Do not scan generator frames more     than once). (Arnaud)
    * Fixed uninitialized lineno in constant AST of internal enums. (ilutov)

    **Curl:**

    * FIxed bug [GH-15547](https://github.com/php/php-src/issues/15547) (curl_multi_select overflow on timeout     argument). (David Carlier)

    **DOM:**

    * Fixed bug [GH-15551](https://github.com/php/php-src/issues/15551) (Segmentation fault (access null     pointer) in ext/dom/xml_common.h). (nielsdos)
    * Fixed bug [GH-15654](https://github.com/php/php-src/issues/15654) (Signed integer overflow in     ext/dom/nodelist.c). (nielsdos)

    **Fileinfo:**

    * Fixed bug [GH-15752](https://github.com/php/php-src/issues/15752) (Incorrect error message for     finfo_file with an empty filename argument). (DanielEScherzer)

    **FPM:**

    * Fixed bug [GHSA-865w-9rf3-2wh5](https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5)     (Logs from childrens may be altered). (**CVE-2024-9026**) (Jakub Zelenka)

    **MySQLnd:**

    * Fixed bug [GH-15432](https://github.com/php/php-src/issues/15432) (Heap corruption when querying a     vector). (cmb, Kamil Tekiela)

    **Opcache:**

    * Fixed bug [GH-15661](https://github.com/php/php-src/issues/15661) (Access null pointer in     Zend/Optimizer/zend_inference.c). (nielsdos)
    * Fixed bug [GH-15658](https://github.com/php/php-src/issues/15658) (Segmentation fault in     Zend/zend_vm_execute.h). (nielsdos)

    **SAPI:**

    * Fixed bug [GHSA-9pqp-7h25-4f32](https://github.com/php/php-src/security/advisories/GHSA-9pqp-7h25-4f32)     (Erroneous parsing of multipart form data). (**CVE-2024-8925**) (Arnaud)

    **Standard:**

    * Fixed bug [GH-15552](https://github.com/php/php-src/issues/15552) (Signed integer overflow in     ext/standard/scanf.c). (cmb)

    **Streams:**

    * Fixed bug [GH-15628](https://github.com/php/php-src/issues/15628) (php_stream_memory_get_buffer() not     zero-terminated). (cmb)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.8 advisory.

  - sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-     cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote     attackers to execute arbitrary code by placing command-line options in the query string, related to lack     of skipping a certain php_getopt for the 'd' case. (CVE-2012-1823)

  - In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open()     command with array syntax, due to insufficient escaping, if the arguments of the executed command are     controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in     Windows shell. (CVE-2024-1874)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-     CGI on Windows, if the system is set up to use certain code pages, Windows may use Best-Fit behavior to     replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those     characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and     thus reveal the source code of scripts, run arbitrary PHP code on the server, etc. (CVE-2024-4577)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error,     filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of     URLs the function will result in invalid user information (username + password part of URLs) being treated     as valid user information. This may lead to the downstream code accepting invalid URLs as valid and     parsing them incorrectly. (CVE-2024-5458)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874     does not work if the command name includes trailing spaces. Original issue: when using proc_open() command     with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled     by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.
    (CVE-2024-5585)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php81 installed on the remote host is prior to 8.1.29 / 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-158-01 advisory.

    New php packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the php81 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
200177	Slackware Linux 15.0/当前 php81 多个漏洞 (SSA:2024-158-01)	Nessus	Slackware Local Security Checks	2024/6/6	2024/10/4	critical
209567	Slackware Linux 15.0 当前 php81 多个漏洞 (SSA:2024-297-01)	Nessus	Slackware Local Security Checks	2024/10/23	2024/11/22	critical
208123	Fedora 39 : php (2024-7c800c4df7)	Nessus	Fedora Local Security Checks	2024/10/4	2024/11/22	critical
209567	Slackware Linux 15.0 php81 Multiple Vulnerabilities (SSA:2024-297-01)	Nessus	Slackware Local Security Checks	2024/10/23	2024/11/22	critical
211244	Fedora 41 : php (2024-a03b06dbd0)	Nessus	Fedora Local Security Checks	2024/11/14	2024/11/22	critical
200161	PHP 8.3.x < 8.3.8 Multiple Vulnerabilities	Nessus	CGI abuses	2024/6/6	2025/5/26	critical
200177	Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-158-01)	Nessus	Slackware Local Security Checks	2024/6/6	2024/10/4	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical