The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10950 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756)

    * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096)

    * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)

    * php: Erroneous parsing of multipart form data (CVE-2024-8925)

    * php: cgi.force_redirect configuration is bypassable due to the environment variable collision     (CVE-2024-8927)

    * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10238:04 advisory.

    php: host/secure cookie bypass due to partial CVE-2022-31629 fix     (CVE-2024-2756)         php: password_verify can erroneously return true, opening ATO risk     (CVE-2024-3096)         php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)         php: Erroneous parsing of multipart form data (CVE-2024-8925)         php: cgi.force_redirect configuration is bypassable due to the environment     variable collision (CVE-2024-8927)         php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)         php: Leak partial content of the heap through heap buffer over-read in     mysqlnd (CVE-2024-8929)         php: Single byte overread with convert.quoted-printable-decode filter     (CVE-2024-11233)         php: Configuring a proxy in a stream context might allow for CRLF injection     in URIs (CVE-2024-11234)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_10949 advisory.

    * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756)

    * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096)

    * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)

    * php: Erroneous parsing of multipart form data (CVE-2024-8925)

    * php: cgi.force_redirect configuration is bypassable due to the environment variable collision     (CVE-2024-8927)

    * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739821812 advisory.

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error,     filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of     URLs the function will result in invalid user information (username + password part of URLs) being treated     as valid user information. This may lead to the downstream code accepting invalid URLs as valid and     parsing them incorrectly. (CVE-2024-5458)

  - In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of     multipart form data contained in an HTTP POST request could lead to legitimate data not being processed.
    This could lead to malicious attacker able to control part of the submitted data being able to exclude     portion of other data, potentially leading to erroneous application behavior. (CVE-2024-8925)

  - In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and     it is configured to catch workers output through catch_workers_output = yes, it may be possible to pollute     the final log or remove up to 4 characters from the log messages by manipulating log message content.
    Additionally, if PHP-FPM is configured to use syslog output, it may be possible to further remove log data     using the same vulnerability. (CVE-2024-9026)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error,     filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of     URLs the function will result in invalid user information (username + password part of URLs) being treated     as valid user information. This may lead to the downstream code accepting invalid URLs as valid and     parsing them incorrectly. (CVE-2024-5458)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of PHP installed on the remote host is prior to 8.2.20. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.20 advisory.

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-     CGI on Windows, if the system is set up to use certain code pages, Windows may use Best-Fit behavior to     replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those     characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and     thus reveal the source code of scripts, run arbitrary PHP code on the server, etc. (CVE-2024-4577)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error,     filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of     URLs the function will result in invalid user information (username + password part of URLs) being treated     as valid user information. This may lead to the downstream code accepting invalid URLs as valid and     parsing them incorrectly. (CVE-2024-5458)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874     does not work if the command name includes trailing spaces. Original issue: when using proc_open() command     with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled     by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.
    (CVE-2024-5585)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-49aba7b305 advisory.

    **PHP version 8.3.8** (06 Jun 2024)

    **CGI:**

    * Fixed buffer limit on Windows, replacing read call usage by _read. (David Carlier)
    * Fixed bug [GHSA-3qgc-jrrr-25jv](https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv)     (Bypass of CVE-2012-1823, Argument Injection in PHP-CGI). (CVE-2024-4577) (nielsdos)

    **CLI:**

    * Fixed bug [GH-14189](https://github.com/php/php-src/issues/14189) (PHP Interactive shell input state     incorrectly handles quoted heredoc literals.). (nielsdos)

    **Core:**

    * Fixed bug [GH-13970](https://github.com/php/php-src/issues/13970) (Incorrect validation of #[Attribute]     flags type for non-compile-time expressions). (ilutov)

    **DOM:**

    * Fix crashes when entity declaration is removed while still having entity references. (nielsdos)
    * Fix references not handled correctly in C14N. (nielsdos)
    * Fix crash when calling childNodes next() when iterator is exhausted. (nielsdos)
    * Fix crash in ParentNode::append() when dealing with a fragment containing text nodes. (nielsdos)

    **Filter:**

    * Fixed bug [GHSA-w8qr-v226-r27w](https://github.com/php/php-src/security/advisories/GHSA-w8qr-v226-r27w)     (Filter bypass in filter_var FILTER_VALIDATE_URL). (**CVE-2024-5458**) (nielsdos)

    **FPM:**

    * Fix bug [GH-14175](https://github.com/php/php-src/issues/14175) (Show decimal number instead of     scientific notation in systemd status). (Benjamin Cremer)

    **Hash:**

    * ext/hash: Swap the checking order of `__has_builtin` and `__GNUC__` (Saki Takamachi)

    **Intl:**

    * Fixed build regression on systems without C++17 compilers. (Calvin Buckley, Peter Kokot)

    **MySQLnd:**

    * Fix bug [GH-14255](https://github.com/php/php-src/issues/14255) (mysqli_fetch_assoc reports error from     nested query). (Kamil Tekiela)

    **Opcache:**

    * Fixed bug [GH-14109](https://github.com/php/php-src/issues/14109) (Fix accidental persisting of internal     class constant in shm). (ilutov)

    **OpenSSL:**

    * The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is     the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes     the changes from this pull request: https://github.com/openssl/openssl/pull/13817     (rsa_pkcs1_implicit_rejection). These changes are part of OpenSSL 3.2 and have also been backported to     stable versions of various Linux distributions, as well as to the PHP builds provided for Windows since     the previous release. All distributors and builders should ensure that this version is used to prevent PHP     from being vulnerable. (**CVE-2024-2408**)

    **Standard:**

    * Fixed bug [GHSA-9fcc-425m-g385](https://github.com/php/php-src/security/advisories/GHSA-9fcc-425m-g385)     (Bypass of CVE-2024-1874). (CVE-2024-5585) (nielsdos)

    **XML:**

    * Fixed bug [GH-14124](https://github.com/php/php-src/issues/14124) (Segmentation fault with XML extension     under certain memory limit). (nielsdos)

    **XMLReader:**

    * Fixed bug [GH-14183](https://github.com/php/php-src/issues/14183) (XMLReader::open() can't be     overridden). (nielsdos)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-19 advisory.

  - Security Center leverages third-party software to help provide underlying functionality. Several of the     third-party components (OpenSSL, PHP, Apache Portable Runtime) were found to contain vulnerabilities, and     updated versions have been made available by the providers.Out of caution and in line with best practice,     Tenable has opted to upgrade these components to address the potential impact of the issues. Security     Center 6.5.0 updates OpenSSL to version 3.0.15, PHP to version 8.2.24 and Apache Portable Runtime to     version 1.7.5 to address the identified vulnerabilities.Additionally, one separate vulnerability was     discovered, reported and fixed:An Improper Certificate Validation vulnerability exists in Tenable Security     Center where an authenticated, privileged attacker could intercept email messages sent from Security     Center via a rogue SMTP server. - CVE-2024-12174 Tenable has released Security Center 6.5.0 to address     these issues. The installation files can be obtained from the Tenable Downloads Portal:
    https://www.tenable.com/downloads/security-center (CVE-2023-49582, CVE-2024-12174, CVE-2024-4603,     CVE-2024-4741, CVE-2024-5458, CVE-2024-5535, CVE-2024-5585, CVE-2024-6119)

  - An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated,     privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server.
    (CVE-2024-12174)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
212506	RHEL 9 : php:8.1 (RHSA-2024:10950)	Nessus	Red Hat Local Security Checks	2024/12/11	2025/4/29	high
282967	MiracleLinux 9 : php-8.0.30-2.el9 (AXSA:2025-10238:04)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	high
357004	Rocky Linux 9 [CIQ] Security Update: apcu-panel / php-pecl-apcu / php-pecl-apcu-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_10949)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
362360	AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739821812)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
230640	Linux Distros Unpatched Vulnerability : CVE-2024-5458	Nessus	Misc.	2025/3/6	2026/11/5	medium
200162	PHP 8.2.x < 8.2.20 Multiple Vulnerabilities	Nessus	CGI abuses	2024/6/6	2025/5/26	critical
200375	Fedora 40 : php (2024-49aba7b305)	Nessus	Fedora Local Security Checks	2024/6/12	2024/10/4	critical
212128	Tenable Security Center < 6.5.0 Multiple Vulnerabilities (TNS-2024-19)	Nessus	Misc.	2024/12/6	2026/1/21	high

检测

插件搜索

high

high

high

medium

medium

critical

critical

high