The version of php installed on the remote host is prior to 7.4.33. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-314-01 advisory.

  - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer     overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.
    This occurs in the sponge function interface. (CVE-2022-37454)

  - The vulnerability exists due to a boundary condition within the imageloadfont() function. A remote     attacker can pass specially crafted data to the web application, trigger an out-of-bounds read error and     read contents of memory on the system. (CVE-2022-31630)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Slackware Linux 15.0 / current php Multiple Vulnerabilities (SSA:2022-314-01)

critical Nessus Plugin ID 167280

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.6 Jan 12, 2023, 11:00 PM IAVM reference
Version 1.5 Dec 16, 2022, 6:16 PM IAVM reference
Version 1.4 Dec 15, 2022, 7:51 PM IAVM reference
Version 1.3 Nov 30, 2022, 4:19 PM CVSS metrics ("CVSSv2 score" changed from "7.5" to "10.0") CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C")
Version 1.2 Nov 11, 2022, 1:45 PM New