Detections
Analytics
Alpine: php82: security update to 8.2.35-r0
critical Tenable Cloud Security Plugin ID 476638
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the
request. Some contexts may not properly account for this scenario and leave request memory in an
uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or
branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote
code execution (RCE). (CVE-2026-109618)
- The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still
holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make
the client read past the end of the packet buffer, which is undefined behaviour and can crash the process.
(CVE-2025-1218)
- The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer
overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away,
a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes
into it, producing a heap buffer overflow. (CVE-2025-14181)
- phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The
field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently
wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file
content as the next TAR header, which lets a crafted archive inject entries that PharData reports and
extracts as if they were genuine. (CVE-2026-6103)
- cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An
unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any
SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exists in the
SOAP value decoder and in the WSDL node search helper. (CVE-2026-91765)
Solution
Update the php82 library and its related packages to version 8.2.35-r0 or later.See Also
https://security.alpinelinux.org/vuln/CVE-2025-1218
https://security.alpinelinux.org/vuln/CVE-2025-14181
https://security.alpinelinux.org/vuln/CVE-2026-109618
https://security.alpinelinux.org/vuln/CVE-2026-109619
https://security.alpinelinux.org/vuln/CVE-2026-6103
https://security.alpinelinux.org/vuln/CVE-2026-91765
https://security.alpinelinux.org/vuln/CVE-2026-91766
https://security.alpinelinux.org/vuln/CVE-2026-91767
https://security.alpinelinux.org/vuln/CVE-2026-91768
https://security.alpinelinux.org/vuln/CVE-2026-91769
Plugin Details
Severity: Critical
ID: 476638
Version: Revision 1.4
Type: Local
Published: 10/22/2026
Updated: 11/5/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
Percentile: 99.88
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-109618
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CVSS v4
Risk Factor: Critical
Base Score: 9.2
Threat Score: 9.2
Threat Vector: CVSS:4.0/E:A
Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2026-109619
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 9/22/2026
Exploitable With
Core Impact
Reference Information
CVE: CVE-2025-1218, CVE-2025-14181, CVE-2026-109618, CVE-2026-109619, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766, CVE-2026-91767, CVE-2026-91768, CVE-2026-91769, CVE-2026-92842, CVE-2026-93682
IAVA: 2026-A-1074-S, 2026-A-1141