The version of php73 installed on the remote host is prior to 7.3.29-1.30. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1532 advisory.

    Several flaws has been found in php. The pdo_firebase module does not check the length of the server     version string in a response packet causing a stack buffer overflow, does not verify the data and uses the     wrong type to cast length leading to a crash, and does not validate the response before calculation of the     exec procedure leading to a crash. The highest threat from this vulnerability is to system availability.
    (CVE-2021-21704)

    A security issue was found in PHP in the way it allows to bypass the FILTER_VALIDATE_URL check via a     crafted URL which may lead to SSRF. (CVE-2021-21705)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4935 advisory.

    Multiple security issues were found in PHP, a widely-used open source general purpose scripting language     which could result an SSRF bypass of the FILTER_VALIDATE_URL check and denial of service or potentially     the execution of arbitrary code in the Firebird PDO. For the stable distribution (buster), these problems     have been fixed in version 7.3.29-1~deb10u1. We recommend that you upgrade your php7.3 packages. For the     detailed security status of php7.3 please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/php7.3

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1727288730 advisory.

  - In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like     filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may     lead to functions that rely on URL being valid to mis-parse the URL and produce wrong data as components     of the URL. (CVE-2020-7071)

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation     functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password     field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially     leading to other security implications - like contacting a wrong server or making a wrong access decision.
    (CVE-2021-21705)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2992 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    The following packages have been upgraded to a later upstream version: rh-php73-php (7.3.29). (BZ#1977764)

    Security Fix(es):

    * php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)

    * php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)

    * php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705)

    * php: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)

    * php: URL decoding of cookie names can lead to different interpretation of cookies between browser and     server (CVE-2020-7070)

    * php: NULL pointer dereference in SoapClient (CVE-2021-21702)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1935 advisory.

  - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running     PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-     privileged users, it is possible for the child processes to access memory shared with the main process and     write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and     writes, which can be used to escalate privileges from local unprivileged user to the root user.
    (CVE-2021-21703)

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation     functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password     field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially     leading to other security implications - like contacting a wrong server or making a wrong access decision.
    (CVE-2021-21705)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2636-1 advisory.

    - CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).
    - CVE-2021-21705: Fixed SSRF bypass in FILTER_VALIDATE_URL (bsc#1188037).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2637-1 advisory.

  - Tenable.sc leverages third-party software to help provide underlying functionality. Multiple third-party     components were found to contain vulnerabilities, and updated versions have been made available by the     providers.  Out of caution, and in line with best practice, Tenable has upgraded the bundled components to     address the potential impact of these issues. Tenable.sc 5.19.0 updates the following components:   1.
    Handlebars CVE-2019-19919 Severity: Critical   2. Underscore CVE-2021-23358 Severity: High   3. Apache FOP     CVE-2017-5661 Severity: High   4. Bootstrap CVE-2019-8331, CVE-2018-20676, CVE-2018-20677, CVE-2018-14040,     CVE-2018-14042, CVE-2016-10735  Highest Severity: Medium   5. PHP CVE-2019-11041, CVE-2019-11042,     CVE-2019-11043, CVE-2019-11044, CVE-2019-11045, CVE-2019-11046, CVE-2019-11047, CVE-2019-11048,     CVE-2019-11049, CVE-2019-11050, CVE-2020-7059, CVE-2020-7060, CVE-2020-7061, CVE-2020-7062, CVE-2020-7063,     CVE-2020-7064, CVE-2020-7065, CVE-2020-7066, CVE-2020-7067, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070,     CVE-2020-7071, CVE-2021-21702, CVE-2021-21704, CVE-2021-21705 Highest Severity: Critical   6. sqlite     CVE-2019-16168, CVE-2019-19645, CVE-2019-19646, CVE-2020-11655, CVE-2020-11656, CVE-2020-13434,     CVE-2020-13435, CVE-2020-13630, CVE-2020-13631, CVE-2020-13632, CVE-2020-15358  Highest Severity: Critical     7. SimpleSAMLPHP CVE-2020-11022 Severity: Medium  Tenable has released Tenable.sc 5.19.0 to address these     issues. The installation files can be obtained from the Tenable Downloads Portal     (https://www.tenable.com/downloads/tenable-sc). (CVE-2021-21704, CVE-2021-21705)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO     driver extension, a malicious database server could cause crashes in various database functions, such as     getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed     correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.
    (CVE-2021-21704)

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation     functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password     field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially     leading to other security implications - like contacting a wrong server or making a wrong access decision.
    (CVE-2021-21705)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1935 advisory.

  - php: Local privilege escalation via PHP-FPM (CVE-2021-21703)

  - php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1935 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: Local privilege escalation via PHP-FPM (CVE-2021-21703)

    * php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0147 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-21703:
    In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running     PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-     privileged users, it is possible for the child processes to access memory shared with the main process and     write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and     writes, which can be used to escalate privileges from local unprivileged user to the root user.

    CVE-2021-21705:
    In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation     functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password     field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially     leading to other security implications - like contacting a wrong server or making a wrong access decision.

    CVE-2022-31626:
    In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension     with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the     connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote     code execution vulnerability.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2708 advisory.

    Several vulnerabilities were discovered in php5, a server-side, HTML-embedded scripting language. An     attacker could cause denial of service (DoS), memory corruption and potentially execution of arbitrary     code, and server-side request forgery (SSRF) bypass. CVE-2019-18218 fileinfo: cdf_read_property_info in     cdf.c does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow     (4-byte out-of-bounds write). CVE-2020-7071 When validating URL with functions like filter_var($url,     FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to     functions that rely on URL being valid to mis-parse the URL and produce wrong data as components of the     URL. CVE-2021-21702 When using SOAP extension to connect to a SOAP server, a malicious SOAP server could     return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a     crash. CVE-2021-21704 Multiple firebird issues. CVE-2021-21705 SSRF bypass in FILTER_VALIDATE_URL. For     Debian 9 stretch, these problems have been fixed in version 7.0.33-0+deb9u11. We recommend that you     upgrade your php7.0 packages. For the detailed security status of php7.0 please refer to its security     tracker page at: https://security-tracker.debian.org/tracker/php7.0 Further information about Debian LTS     security advisories, how to apply these updates to your system and frequently asked questions can be found     at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4069-1 advisory.

    - Version update to 7.4.33:
    - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont()     (bsc#1204979).
    - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).

    - Version update to 7.4.32 (jsc#SLE-23639)
    - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines'     gzip files. (bsc#1203867)
    - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as     secure in the victim's browser. (bsc#1203870)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4068-1 advisory.

    - Version update to 7.4.33:
    - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont()     (bsc#1204979).
    - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).

    - Version update to 7.4.32 (jsc#SLE-23639)
    - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines'     gzip files. (bsc#1203867)
    - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as     secure in the victim's browser. (bsc#1203870)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is less than 5.19.0 and is therefore affected by multiple vulnerabilities in the following components: 
  - Apache FOP
  - Underscore
  - Handlebars
  - PHP
  - sqlite

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
153169	Amazon Linux AMI : php73 (ALAS-2021-1532)	Nessus	Amazon Linux Local Security Checks	2021/9/9	2024/12/11	medium
151423	Debian DSA-4935-1 : php7.3 - security update	Nessus	Debian Local Security Checks	2021/7/6	2025/1/24	medium
361771	CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1727288730)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	medium
152348	RHEL 7 : rh-php73-php (RHSA-2021:2992)	Nessus	Red Hat Local Security Checks	2021/8/9	2024/11/7	medium
184973	Rocky Linux 8 : php:7.4 (RLSA-2022:1935)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/14	high
152254	SUSE SLED12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2021:2636-1)	Nessus	SuSE Local Security Checks	2021/8/6	2026/6/25	medium
152259	openSUSE 15 Security Update : php7 (openSUSE-SU-2021:2637-1)	Nessus	SuSE Local Security Checks	2021/8/6	2023/12/6	medium
158012	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2022-1089)	Nessus	Huawei Local Security Checks	2022/2/13	2023/11/9	medium
160907	CentOS 8 : php:7.4 (CESA-2022:1935)	Nessus	CentOS Local Security Checks	2022/5/10	2023/10/27	high
161032	RHEL 8 : php:7.4 (RHSA-2022:1935)	Nessus	Red Hat Local Security Checks	2022/5/11	2025/4/8	high
236440	Alibaba Cloud Linux 3 : 0147: php:7.4 (ALINUX3-SA-2022:0147)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
151676	Debian DLA-2708-1 : php7.0 - LTS security update	Nessus	Debian Local Security Checks	2021/7/15	2025/1/24	high
167937	SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:4069-1)	Nessus	SuSE Local Security Checks	2022/11/19	2026/6/25	critical
167963	SUSE SLES12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2022:4068-1)	Nessus	SuSE Local Security Checks	2022/11/19	2026/6/25	critical
152986	Tenable SecurityCenter < 5.19.0 Multiple Vulnerabilities (TNS-2021-14)	Nessus	Misc.	2021/9/3	2024/5/10	critical

检测

插件搜索

medium

medium

medium

medium

high

medium

medium

medium

high

high

high

high

critical

critical

critical