The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7e9290d67f advisory.

    **PHP version 8.4.16** (18 Dec 2025)

    **Core:**

    * Sync all boost.context files with release 1.86.0. (mvorisek)
    * Fixed bug [GH-20435](https://github.com/php/php-src/issues/20435) (SensitiveParameter doesn't work for     named argument passing to variadic parameter). (ndossche)
    * Fixed bug [GH-20286](https://github.com/php/php-src/issues/20286) (use-after-destroy during userland     stream_close()). (ndossche, David Carlier)

    **Bz2:**

    * Fix assertion failures resulting in crashes with stream filter object parameters. (ndossche)

    **Date:**

    * Fix crashes when trying to instantiate uninstantiable classes via date static constructors. (ndossche)

    **DOM:**

    * Fix memory leak when edge case is hit when registering xpath callback. (ndossche)
    * Fixed bug [GH-20395](https://github.com/php/php-src/issues/20395) (querySelector and querySelectorAll     requires elements in $selectors to be lowercase). (ndossche)
    * Fix missing NUL byte check on C14NFile(). (ndossche)

    **Fibers:**

    * Fixed bug [GH-20483](https://github.com/php/php-src/issues/20483) (ASAN stack overflow with     fiber.stack_size INI small value). (David Carlier)

    **FTP:**

    * Fixed bug [GH-20601](https://github.com/php/php-src/issues/20601) (ftp_connect overflow on timeout).
    (David Carlier)

    **GD:**

    * Fixed bug [GH-20511](https://github.com/php/php-src/issues/20511) (imagegammacorrect out of range     input/output values). (David Carlier)
    * Fixed bug [GH-20602](https://github.com/php/php-src/issues/20602) (imagescale overflow with large height     values). (David Carlier)

    **Intl:**

    * Fixed bug [GH-20426](https://github.com/php/php-src/issues/20426) (Spoofchecker::setRestrictionLevel()     error message suggests missing constants). (DanielEScherzer)

    **LibXML:**

    * Fix some deprecations on newer libxml versions regarding input buffer/parser handling. (ndossche)

    **MbString:**

    * Fixed bug [GH-20491](https://github.com/php/php-src/issues/20491) (SLES15 compile error with mbstring     oniguruma). (ndossche)
    * Fixed bug [GH-20492](https://github.com/php/php-src/issues/20492) (mbstring compile warning due to non-     strings). (ndossche)

    **MySQLnd:**

    * Fixed bug [GH-20528](https://github.com/php/php-src/issues/20528) (Regression breaks mysql connexion     using an IPv6 address enclosed in square brackets). (Remi)

    **Opcache:**

    * Fixed bug [GH-20329](https://github.com/php/php-src/issues/20329) (opcache.file_cache broken with full     interned string buffer). (Arnaud)

    **PDO:**

    * Fixed [GHSA-8xr5-qppj-gvwj](https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwj) (PDO     quoting result null deref). (**CVE-2025-14180**) (Jakub Zelenka)

    **Phar:**

    * Fixed bug [GH-20442](https://github.com/php/php-src/issues/20442) (Phar does not respect case-     insensitiveness of __halt_compiler() when reading stub). (ndossche, TimWolla)
    * Fix broken return value of fflush() for phar file entries. (ndossche)
    * Fix assertion failure when fseeking a phar file out of bounds. (ndossche)

    **PHPDBG:**

    * Fixed ZPP type violation in phpdbg_get_executable() and phpdbg_end_oplog(). (Girgias)

    **SPL:**

    * Fixed bug [GH-20614](https://github.com/php/php-src/issues/20614) (SplFixedArray incorrectly handles     references in deserialization). (ndossche)

    **Standard:**

    * Fix memory leak in array_diff() with custom type checks. (ndossche)
    * Fixed bug [GH-20583](https://github.com/php/php-src/issues/20583) (Stack overflow in http_build_query     via deep structures). (ndossche)
    * Fixed [GHSA-www2-q4fc-65wf](https://github.com/php/php-src/security/advisories/GHSA-www2-q4fc-65wf)     (Null byte termination in dns_get_record()). (ndossche)
    * Fixed [GHSA-h96m-rvf9-jgm2](https://github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2)     (Heap buffer overflow in array_merge()). (**CVE-2025-14178**) (ndossche)
    * Fixed [GHSA-3237-qqm7-mfv7](https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7)     (Information Leak of Memory in getimagesize). (**CVE-2025-14177**) (ndossche)

    **Tidy:**

    * Fixed bug [GH-20374](https://github.com/php/php-src/issues/20374) (PHP with tidy and custom-tags).
    (ndossche)

    **XML:**

    * Fixed bug [GH-20439](https://github.com/php/php-src/issues/20439) (xml_set_default_handler() does not     properly handle special characters in attributes when passing data to callback). (ndossche)

    **Zlib:**

    * Fix assertion failures resulting in crashes with stream filter object parameters. (ndossche)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1352 advisory.

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7NOTE:
    https://github.com/php/php-src/commit/c5f28c7cf0a052f48e47877c7aa5c5bcc54f1cfcDEBIANBUG: [1123574]     (CVE-2025-14177)

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2NOTE: Fixed by:
    https://github.com/php/php-src/commit/e6d7d34c1ae46281993036189e3bcb6528911ce8 (php-8.4.16)DEBIANBUG:
    [1123574] (CVE-2025-14178)

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwjNOTE: Fixed by:
    https://github.com/php/php-src/commit/d521259e44288146aa3dc692bdf234cf45a4bd86 (php-8.4.16)DEBIANBUG:
    [1123574] (CVE-2025-14180)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php installed on the remote host is prior to 8.1.34-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.1-2026-008 advisory.

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7NOTE:
    https://github.com/php/php-src/commit/c5f28c7cf0a052f48e47877c7aa5c5bcc54f1cfcDEBIANBUG: [1123574]     (CVE-2025-14177)

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2NOTE: Fixed by:
    https://github.com/php/php-src/commit/e6d7d34c1ae46281993036189e3bcb6528911ce8 (php-8.4.16)DEBIANBUG:
    [1123574] (CVE-2025-14178)

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwjNOTE: Fixed by:
    https://github.com/php/php-src/commit/d521259e44288146aa3dc692bdf234cf45a4bd86 (php-8.4.16)DEBIANBUG:
    [1123574] (CVE-2025-14180)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1185 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1169 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:1429 advisory.

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images     (CVE-2025-14177)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1429 advisory.

    php     [8.3.29-1]
    - rebase to 8.3.29

    php-pecl-apcu     php-pecl-redis6     php-pecl-rrd     php-pecl-xdebug3     php-pecl-zip

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-122:01 advisory.

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
      * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images     (CVE-2025-14177)
      * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1412 advisory.

    * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)
      * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)
      * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)
      * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
      * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images     (CVE-2025-14177)
      * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6088 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6088-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     December 21, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : php8.4     CVE ID         : CVE-2025-14177 CVE-2025-14178 CVE-2025-14180

    Multiple security issues were found in PHP, a widely-used open source     general purpose scripting language which could result in denial of     service or memory disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 8.4.16-1~deb13u1.

    We recommend that you upgrade your php8.4 packages.

    For the detailed security status of php8.4 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/php8.4

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1355 advisory.

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7NOTE:
    https://github.com/php/php-src/commit/c5f28c7cf0a052f48e47877c7aa5c5bcc54f1cfcDEBIANBUG: [1123574]     (CVE-2025-14177)

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2NOTE: Fixed by:
    https://github.com/php/php-src/commit/e6d7d34c1ae46281993036189e3bcb6528911ce8 (php-8.4.16)DEBIANBUG:
    [1123574] (CVE-2025-14178)

    NOTE: https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwjNOTE: Fixed by:
    https://github.com/php/php-src/commit/d521259e44288146aa3dc692bdf234cf45a4bd86 (php-8.4.16)DEBIANBUG:
    [1123574] (CVE-2025-14180)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1190 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1412 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)

    * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)

    * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images     (CVE-2025-14177)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1628 advisory.

    [8.3.29-1]
    - rebase to 8.3.29

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-124:01 advisory.

    php: pgsql extension does not check for errors during escaping     (CVE-2025-1735)         php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace     Prefix (CVE-2025-6491)         php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)         php: heap-based buffer overflow in array_merge() (CVE-2025-14178)         php: PHP: Information disclosure via getimagesize() function when reading     multi-chunk images (CVE-2025-14177)         php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL     prepared statement (CVE-2025-14180)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable Security Center running on the remote host prior or equal to 6.7.2 and missing relevant patches. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-06 advisory.

  - In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.*     before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays     exceeds 32-bit limits or HT_MAX_SIZE, due to an integer overflow in the precomputation of element counts     using zend_hash_num_elements(). This may lead to memory corruption or crashes and affect the integrity and     availability of the target server. (CVE-2025-14178)

  - In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.*     before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid     character sequence (such as \x99) in a prepared statement parameter may cause the quoting function     PQescapeStringConn to return NULL, leading to a null pointer dereference in pdo_parse_params() function.
    This may lead to crashes (segmentation fault) and affect the availability of the target server.
    (CVE-2025-14180)

  - When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol     redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the     bearer token to the new target host. (CVE-2025-14524)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
279348	Fedora 43 : php (2025-7e9290d67f)	Nessus	Fedora Local Security Checks	2025/12/19	2026/2/23	high
282398	Amazon Linux 2023 : php8.4, php8.4-bcmath, php8.4-cli (ALAS2023-2025-1352)	Nessus	Amazon Linux Local Security Checks	2026/1/8	2026/2/18	high
294911	Amazon Linux 2 : php, --advisory ALAS2PHP8.1-2026-008 (ALASPHP8.1-2026-008)	Nessus	Amazon Linux Local Security Checks	2026/1/22	2026/1/22	high
296600	RHEL 10 : php (RHSA-2026:1185)	Nessus	Red Hat Local Security Checks	2026/1/26	2026/1/26	high
296618	RHEL 9 : php:8.2 (RHSA-2026:1169)	Nessus	Red Hat Local Security Checks	2026/1/26	2026/1/26	high
297029	RockyLinux 9 : php:8.3 (RLSA-2026:1429)	Nessus	Rocky Linux Local Security Checks	2026/1/28	2026/1/31	high
297097	Oracle Linux 9 : php:8.3 (ELSA-2026-1429)	Nessus	Oracle Linux Local Security Checks	2026/1/29	2026/2/2	high
297555	MiracleLinux 9 : php:8.3 (AXSA:2026-122:01)	Nessus	Miracle Linux Local Security Checks	2026/2/2	2026/2/4	high
297563	AlmaLinux 8 : php:8.2 (ALSA-2026:1412)	Nessus	Alma Linux Local Security Checks	2026/2/2	2026/2/2	high
279493	Debian dsa-6088 : libapache2-mod-php8.4 - security update	Nessus	Debian Local Security Checks	2025/12/21	2026/2/20	high
282390	Amazon Linux 2023 : php8.1, php8.1-bcmath, php8.1-cli (ALAS2023-2025-1355)	Nessus	Amazon Linux Local Security Checks	2026/1/8	2026/2/18	high
296619	RHEL 9 : php:8.3 (RHSA-2026:1190)	Nessus	Red Hat Local Security Checks	2026/1/26	2026/1/26	high
296914	RHEL 8 : php:8.2 (RHSA-2026:1412)	Nessus	Red Hat Local Security Checks	2026/1/27	2026/1/27	high
297550	Oracle Linux 10 : php (ELSA-2026-1628)	Nessus	Oracle Linux Local Security Checks	2026/2/2	2026/2/2	high
297568	MiracleLinux 8 : php:8.2 (AXSA:2026-124:01)	Nessus	Miracle Linux Local Security Checks	2026/2/2	2026/2/2	high
299667	Tenable Security Center Multiple Vulnerabilities (TNS-2026-06)	Nessus	Misc.	2026/2/20	2026/4/24	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high