The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0088 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-31628:
    In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress     quines gzip files, resulting in an infinite loop.

    CVE-2022-31629:
    In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or     `__Secure-` cookie by PHP applications.

    CVE-2022-31630:
    In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension,     it is possible to supply a specially crafted font file, such as if the loaded font is used with     imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or     disclosure of confidential information.

    CVE-2022-31631:
    A flaw was found in PHP. This issue occurs due to an uncaught integer overflow in PDO::quote() of     PDO_SQLite returning an improperly quoted string. With the implementation of sqlite3_snprintf(), it is     possible to force the function to return a single apostrophe if the function is called on user-supplied     input without any length restrictions in place.

    CVE-2022-37454:
    The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer     overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.
    This occurs in the sponge function interface.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2417 advisory.

    * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)

    * php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications     (CVE-2022-31629)

    * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)

    * php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631)

    * php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php installed on the remote host is prior to 8.1.14-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2PHP8.1-2023-003 advisory.

    A flaw was found in PHP. This issue occurs due to an uncaught integer overflow in PDO::quote() of     PDO_SQLite returning an improperly quoted string. With the implementation of sqlite3_snprintf(), it is     possible to force the function to return a single apostrophe if the function is called on user-supplied     input without any length restrictions in place. (CVE-2022-31631)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5806:01 advisory.

    * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
      * php: standard insecure cookie could be treated as a '__Host-' or '__Secure-'     cookie by PHP applications (CVE-2022-31629)
      * php: OOB read due to insufficient input validation in imageloadfont()     (CVE-2022-31630)
      * php: PDO::quote() may return unquoted string due to an integer overflow     (CVE-2022-31631)
      * php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5146:01 advisory.

    * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
      * php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP     applications (CVE-2022-31629)
      * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
      * php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)
      * php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0073-1 advisory.

    - CVE-2022-31631: Fixed an issue where PDO::quote would return an       unquoted string (bsc#1206958).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0072-1 advisory.

    - CVE-2022-31631: Fixed an issue where PDO::quote would return an       unquoted string (bsc#1206958).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2dc2d607ba advisory.

    **PHP version 8.1.14** (05 Jan 2023)

    **Core:**

    * Fixed bug [GH-9905](https://github.com/php/php-src/issues/9905) (constant() behaves inconsistent when     class is undefined). (cmb)
    * Fixed bug [GH-9918](https://github.com/php/php-src/issues/9918) (License information for xxHash is not     included in README.REDIST.BINS file). (Akama Hitoshi)
    * Fixed bug [GH-9650](https://github.com/php/php-src/issues/9650) (Can't initialize heap: [0x000001e7]).
    (Michael Voek)
    * Fixed potentially undefined behavior in Windows ftok(3) emulation. (cmb)

    **Date:**

    * Fixed bug [GH-9699](https://github.com/php/php-src/issues/9699) (DateTimeImmutable::diff differences in     8.1.10 onwards - timezone related). (Derick)
    * Fixed bug [GH-9700](https://github.com/php/php-src/issues/9700) (DateTime::createFromFormat: Parsing     TZID string is too greedy). (Derick)
    * Fixed bug [GH-9866](https://github.com/php/php-src/issues/9866) (Time zone bug with     \DateTimeInterface::diff()). (Derick)
    * Fixed bug [GH-9880](https://github.com/php/php-src/issues/9880) (DateTime diff returns wrong sign on day     count when using a timezone). (Derick)

    **FPM:**

    * Fixed bug [GH-9959](https://github.com/php/php-src/issues/9959) (Solaris port event mechanism is still     broken after bug php#66694). (Petr Sumbera)
    * Fixed bug php#68207 (Setting fastcgi.error_header can result in a WARNING). (Jakub Zelenka)
    * Fixed bug [GH-8517](https://github.com/php/php-src/issues/8517) (Random crash of FPM master process in     fpm_stdio_child_said). (Jakub Zelenka)

    **MBString:**

    * Fixed bug [GH-9535](https://github.com/php/php-src/issues/9535) (The behavior of mb_strcut in mbstring     has been changed in PHP8.1). (Nathan Freeman)

    **Opcache:**

    * Fixed bug [GH-9968](https://github.com/php/php-src/issues/9968) (Segmentation Fault during OPCache     Preload). (Arnaud, michdingpayc)

    **OpenSSL:**

    * Fixed bug [GH-9064](https://github.com/php/php-src/issues/9064) (PHP fails to build if openssl was built     with --no-ec). (Jakub Zelenka)
    * Fixed bug [GH-10000](https://github.com/php/php-src/issues/10000) (OpenSSL test failures when OpenSSL     compiled with no-dsa). (Jakub Zelenka)

    **Pcntl:**

    * Fixed bug [GH-9298](https://github.com/php/php-src/issues/9298) (Signal handler called after rshutdown     leads to crash). (Erki Aring)

    **PDO_Firebird:**

    * Fixed bug [GH-9971](https://github.com/php/php-src/issues/9971) (Incorrect NUMERIC value returned from     PDO_Firebird). (cmb)

    **PDO/SQLite:**

    * Fixed bug php#81740 (PDO::quote() may return unquoted string). (**CVE-2022-31631**) (cmb)

    **Session:**

    * Fixed [GH-9932](https://github.com/php/php-src/issues/9932) (session name silently fails with . and [).
    (David Carlier)

    **SPL:**

    * Fixed [GH-9883](https://github.com/php/php-src/issues/9883) (SplFileObject::__toString() reads next     line). (Girgias)
    * Fixed [GH-10011](https://github.com/php/php-src/issues/10011) (Trampoline autoloader will get     reregistered and cannot be unregistered). (Girgias)

    **SQLite3:**

    * Fixed bug php#81742 (open_basedir bypass in SQLite3 by using file URI). (cmb)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
236216	Alibaba Cloud Linux 3 : 0088: php:7.4 (ALINUX3-SA-2023:0088)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
280098	RockyLinux 9 : php:8.1 (RLSA-2023:2417)	Nessus	Rocky Linux Local Security Checks	2025/12/27	2025/12/27	critical
181390	Amazon Linux 2 : php (ALASPHP8.1-2023-003)	Nessus	Amazon Linux Local Security Checks	2023/9/13	2025/2/13	critical
292381	MiracleLinux 9 : php:8.1 (AXSA:2023-5806:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
293264	MiracleLinux 8 : php:8.0 (AXSA:2023-5146:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
169945	SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2023:0073-1)	Nessus	SuSE Local Security Checks	2023/1/12	2026/6/26	critical
169986	SUSE SLES12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2023:0072-1)	Nessus	SuSE Local Security Checks	2023/1/12	2026/6/26	medium
170006	Fedora 36 : php (2023-2dc2d607ba)	Nessus	Fedora Local Security Checks	2023/1/13	2025/2/13	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

medium

critical