The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0848 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    The following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666)

    Security Fix(es):

    * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)

    * php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications     (CVE-2022-31629)

    * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)

    * php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)

    * php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0848 advisory.

    php     [8.0.27-1]
    - rebase to 8.0.27

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0965 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    The following packages have been upgraded to a later upstream version: php (8.0.27). (BZ#2161667)

    Security Fix(es):

    * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)

    * php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications     (CVE-2022-31629)

    * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)

    * php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)

    * php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5905-1 advisory.

    It was discovered that PHP incorrectly handled certain gzip files. An attacker could possibly use this     issue to cause a denial of service. (CVE-2022-31628)

    It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue     to compromise data integrity. (CVE-2022-31629)

    It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue     to cause a crash or execute arbitrary code. (CVE-2022-31631)

    It was discovered that PHP incorrectly handled resolving long paths. A remote attacker could possibly use     this issue to obtain or modify sensitive information. (CVE-2023-0568)

    It was discovered that PHP incorrectly handled a large number of field and file parts in HTTP form     uploads. A remote attacker could possibly use this issue to cause PHP to consume resources, leading to a     denial of service. (CVE-2023-0662)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0965 advisory.

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress     quines gzip files, resulting in an infinite loop. (CVE-2022-31628)

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or     `__Secure-` cookie by PHP applications. (CVE-2022-31629)

  - In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension,     it is possible to supply a specially crafted font file, such as if the loaded font is used with     imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or     disclosure of confidential information. (CVE-2022-31630)

  - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer     overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.
    This occurs in the sponge function interface. (CVE-2022-37454)

  - php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2417 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    The following packages have been upgraded to a later upstream version: php (8.1.14).

    Security Fix(es):

    * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)

    * php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications     (CVE-2022-31629)

    * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)

    * php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631)

    * php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php installed on the remote host is prior to 8.0.24-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.0-2024-010 advisory.

    2024-02-15: CVE-2022-31629 was added to this advisory.

    2024-02-15: CVE-2022-31628 was added to this advisory.

    In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress     quines gzip files, resulting in an infinite loop. (CVE-2022-31628)

    In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a  or  cookie by     PHP applications. (CVE-2022-31629)

    There is a potential buffer overflow in the PHP built-in web server - setting the environment variable     PHP_CLI_SERVER_WORKERS to a large value can lead to a heap buffer overflow. (CVE-2022-4900)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5958:01 advisory.

    * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
      * php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP     applications (CVE-2022-31629)
      * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
      * php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631)
      * php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3957-1 advisory.

    - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines'     gzip files. (bsc#1203867)
    - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as     secure in the victim's browser. (bsc#1203870)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5277 advisory.

    Multiple security issues were discovered in PHP, a widely-used open source general purpose scripting     language which could result in denial of service, information disclosure, insecure cookies handling or     potentially the execution of arbitrary code. For the stable distribution (bullseye), these problems have     been fixed in version 7.4.33-1+deb11u1. We recommend that you upgrade your php7.4 packages. For the     detailed security status of php7.4 please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/php7.4

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4067-1 advisory.

    - Version update to 7.2.34 [jsc#SLE-23639]

    - CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).
    - Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
171724	RHEL 8 : php:8.0 (RHSA-2023:0848)	Nessus	Red Hat Local Security Checks	2023/2/21	2025/3/14	critical
171800	Oracle Linux 8 : php:8.0 (ELSA-2023-0848)	Nessus	Oracle Linux Local Security Checks	2023/2/22	2024/11/1	critical
171971	RHEL 9 : php (RHSA-2023:0965)	Nessus	Red Hat Local Security Checks	2023/2/28	2025/3/14	critical
172053	Ubuntu 16.04 ESM : PHP vulnerabilities (USN-5905-1)	Nessus	Ubuntu Local Security Checks	2023/3/2	2024/8/27	high
173989	Rocky Linux 9 : php (RLSA-2023:0965)	Nessus	Rocky Linux Local Security Checks	2023/4/6	2023/10/18	critical
175435	RHEL 9 : php:8.1 (RHSA-2023:2417)	Nessus	Red Hat Local Security Checks	2023/5/12	2025/3/14	critical
190054	Amazon Linux 2 : php (ALASPHP8.0-2024-010)	Nessus	Amazon Linux Local Security Checks	2024/2/6	2024/12/11	medium
292411	MiracleLinux 8 : php:7.4 (AXSA:2023-5958:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
167352	SUSE SLES12: apache2-mod_php72 / php72 / php72-bcmath / php72-bz2 / etc (SUSE-SU-2022:3957-1)	Nessus	SuSE Local Security Checks	2022/11/13	2026/6/26	medium
167434	Debian DSA-5277-1 : php7.4 - security update	Nessus	Debian Local Security Checks	2022/11/14	2025/1/24	critical
167950	SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:4067-1)	Nessus	SuSE Local Security Checks	2022/11/19	2026/6/25	critical

检测

插件搜索

critical

critical

critical

high

critical

critical

medium

critical

medium

critical

critical