The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3997-1 advisory.

    - Version update to 7.4.33:
    - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont()     (bsc#1204979).
    - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).


    - Version update to 7.4.32 (jsc#SLE-23639)
    - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines'     gzip files. (bsc#1203867)
    - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as     secure in the victim's browser. (bsc#1203870)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090650 advisory.

    In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions     with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to     trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of     other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7628 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    The following packages have been upgraded to a later upstream version: php (7.4.30), php-pear (1.10.13).
    (BZ#2055422)

    Security Fix(es):

    * php: Special character breaks path in xml parsing (CVE-2021-21707)

    * php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)

    * php-pear: Directory traversal vulnerability (CVE-2021-32610)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7628 advisory.

    - fix password of excessive length triggers buffer overflow leading to RCE       CVE-2022-31626
    - fix SSRF bypass in FILTER_VALIDATE_URL       CVE-2021-21705
    - fix Local privilege escalation via PHP-FPM       CVE-2021-21703

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0018 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-21707:
    In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing     functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains     URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus     interpreting the filename differently from what the user intended, which may lead it to reading a     different file than intended.

    CVE-2021-21708:
    In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions     with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to     trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of     other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.

    CVE-2021-32610:
    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different     vulnerability than CVE-2020-36193.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5303-1 advisory.

    It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue     to cause a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0847-1 advisory.

    - CVE-2021-21708: Fixed a memory corruption issue when processing integers       from an untrusted source (bsc#1196252).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202209-20 (PHP: Multiple Vulnerabilities)

  - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running     PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-     privileged users, it is possible for the child processes to access memory shared with the main process and     write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and     writes, which can be used to escalate privileges from local unprivileged user to the root user.
    (CVE-2021-21703)

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO     driver extension, a malicious database server could cause crashes in various database functions, such as     getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed     correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.
    (CVE-2021-21704)

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation     functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password     field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially     leading to other security implications - like contacting a wrong server or making a wrong access decision.
    (CVE-2021-21705)

  - In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions     with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to     trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of     other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.
    (CVE-2021-21708)

  - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres     database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to     free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of     service. (CVE-2022-31625)

  - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension     with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the     connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote     code execution vulnerability. (CVE-2022-31626)

  - In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch     applied to the third party code from libmagic, incorrect function may be used to free allocated memory,     which may lead to heap corruption. (CVE-2022-31627)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3016 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7624 advisory.

  - php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)

  - php: Uninitialized array in pg_query_params() leading to RCE (CVE-2022-31625)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7628 advisory.

  - php: Special character breaks path in xml parsing (CVE-2021-21707)

  - php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)

  - php-pear: Directory traversal vulnerability (CVE-2021-32610)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
167650	SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:3997-1)	Nessus	SuSE Local Security Checks	2022/11/16	2026/6/25	critical
348973	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090650)	Nessus	Unity Linux Local Security Checks	2026/9/22	2026/9/22	critical
167091	RHEL 8 : php:7.4 (RHSA-2022:7628)	Nessus	Red Hat Local Security Checks	2022/11/8	2025/3/20	critical
167528	Oracle Linux 8 : php:7.4 (ELSA-2022-7628)	Nessus	Oracle Linux Local Security Checks	2022/11/15	2024/11/1	critical
236672	Alibaba Cloud Linux 3 : 0018: php:7.4 (ALINUX3-SA-2023:0018)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
158454	Ubuntu 20.04 LTS : PHP vulnerability (USN-5303-1)	Nessus	Ubuntu Local Security Checks	2022/2/28	2024/8/27	critical
158963	SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:0847-1)	Nessus	SuSE Local Security Checks	2022/3/16	2026/6/26	critical
165627	GLSA-202209-20 : PHP: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2022/10/3	2023/10/10	critical
233258	RHEL 8 : php:7.4 (RHSA-2025:3016)	Nessus	Red Hat Local Security Checks	2025/3/22	2025/6/5	critical
167147	CentOS 8 : php:8.0 (CESA-2022:7624)	Nessus	CentOS Local Security Checks	2022/11/9	2023/10/5	critical
167186	CentOS 8 : php:7.4 (CESA-2022:7628)	Nessus	CentOS Local Security Checks	2022/11/9	2023/10/18	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical