リモートの Fedora 39 ホストには、FEDORA-2024-7c800c4df7 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    **PHP バージョン 8.2.24** (2024 年 9 月 26 日)

    **CGI:**

    * バグを修正 [GHSA-p99j-rfp4-xqvq] (https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq) (CVE-2024-4577 のバイパス、パラメーターインジェクションの脆弱性)。(**CVE-2024-8926**) (nielsdos)
    * バグを修正 [GHSA-94p6-54jq-9mwp] (https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp) (cgi.force_redirect 設定は環境変数の衝突によりバイパス可能)。
    (**CVE-2024-8927**) (nielsdos)

    **コア:**

    * バグを修正 [GH-15408] (https://github.com/php/php-src/issues/15408) (zend_max_execution_timer での MSend 偽陽性)。(zeriyoshi)
    * バグを修正 [GH-15515] (https://github.com/php/php-src/issues/15515) (エラー grep の不正なオプション q を設定)。（Peter Kokot氏）
    * バグを修正 [GH-15514] (https://github.com/php/php-src/issues/15514) (エラーの設定: genif.sh: 構文エラー)。（Peter Kokot氏）
    * バグを修正 [GH-15565] (https://github.com/php/php-src/issues/15565) (--disable-ipv6 がコンパイル中にエラー EAI_SYSTEM not found を生成)。(nielsdos)
    * バグを修正 [GH-15587] (https://github.com/php/php-src/issues/15587) (CRC32 arm 32 ビットの API ビルドエラー)。
    (Bernd Kuhls、Thomas Petazzoni)
    * バグを修正 [GH-15330] (https://github.com/php/php-src/issues/15330) (ジェネレーターフレームを複数回スキャンしない)。(Arnaud)
    * 内部列挙の定数 AST の初期化されていない lineno を修正。(ilutov)

    **Curl：**

    * バグを修正 [GH-15547] (https://github.com/php/php-src/issues/15547) (タイムアウト引数での curl_multi_select のオーバーフロー)。(David Carlier 氏)

    **DOM:**

    * バグを修正 [GH-15551] (https://github.com/php/php-src/issues/15551) (ext/dom/xml_common.h でのセグメンテーション違反 (アクセス NULL ポインター))。(nielsdos)

    **Fileinfo:**

    * バグを修正 [GH-15752] (https://github.com/php/php-src/issues/15752) (空のファイル名引数を持つ finfo_file のエラーメッセージが正しくない)。(DanielEScherzer)

    **FPM:**

    * バグを修正 [GHSA-865w-9rf3-2wh5] (https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5) (childrens からのログは変更される可能性がある)。(**CVE-2024-9026**) (Jakub Zelenka)

    **MySQLnd:**

    * バグを修正 [GH-15432] (https://github.com/php/php-src/issues/15432) (ベクトルをクエリするときのヒープ破損)。(cmb、Kamil Tekiela)

    **Opcache:**

    * バグを修正 [GH-15661] (https://github.com/php/php-src/issues/15661) (Zend/Optimizer/zend_inference.c での null ポインターへのアクセス)。(nielsdos)
    * バグを修正 [GH-15658] (https://github.com/php/php-src/issues/15658) (Zend/zend_vm_execute.h のセグメンテーション違反)。(nielsdos)

    **SAPI:**

    * バグを修正 [GHSA-9pqp-7h25-4f32] (https://github.com/php/php-src/security/advisories/GHSA-9pqp-7h25-4f32) (マルチパートフォームデータの誤った解析)。(**CVE-2024-8925**) (Arnaud)

    **SOAP:**

    * バグ php#73182 (PHP SOAPClient は、配列形式のストリームコンテキスト HTTP ヘッダーをサポートしていません) を修正しました。
    (nielsdos)

    **Standard:**

    * バグを修正 [GH-15552] (https://github.com/php/php-src/issues/15552) (ext/standard/scanf.c の符号付き整数オーバーフロー)。(cmb)

    **ストリーム：**

    * バグを修正 [GH-15628] (https://github.com/php/php-src/issues/15628) (php_stream_memory_get_buffer() がゼロ終端されない)。(cmb)

Tenable は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートホストにインストールされている php81 のバージョンは、8.1.30 より前のバージョンです。したがって、SSA:2024-297-01 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

    セキュリティ問題を修正する新しい php81 パッケージが、Slackware 15.0 で利用可能です。

Tenable は、前述の記述ブロックを php81 セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of PHP installed on the remote host is prior to 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.8 advisory.

  - sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-     cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote     attackers to execute arbitrary code by placing command-line options in the query string, related to lack     of skipping a certain php_getopt for the 'd' case. (CVE-2012-1823)

  - In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open()     command with array syntax, due to insufficient escaping, if the arguments of the executed command are     controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in     Windows shell. (CVE-2024-1874)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-     CGI on Windows, if the system is set up to use certain code pages, Windows may use Best-Fit behavior to     replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those     characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and     thus reveal the source code of scripts, run arbitrary PHP code on the server, etc. (CVE-2024-4577)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error,     filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of     URLs the function will result in invalid user information (username + password part of URLs) being treated     as valid user information. This may lead to the downstream code accepting invalid URLs as valid and     parsing them incorrectly. (CVE-2024-5458)

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874     does not work if the command name includes trailing spaces. Original issue: when using proc_open() command     with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled     by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.
    (CVE-2024-5585)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php81 installed on the remote host is prior to 8.1.29 / 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-158-01 advisory.

    New php packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the php81 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7c800c4df7 advisory.

    **PHP version 8.2.24** (26 Sep 2024)

    **CGI:**

    * Fixed bug [GHSA-p99j-rfp4-xqvq](https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq)     (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (**CVE-2024-8926**) (nielsdos)
    * Fixed bug [GHSA-94p6-54jq-9mwp](https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp)     (cgi.force_redirect configuration is bypassable due to the environment variable collision).
    (**CVE-2024-8927**) (nielsdos)

    **Core:**

    * Fixed bug [GH-15408](https://github.com/php/php-src/issues/15408) (MSan false-positve on     zend_max_execution_timer). (zeriyoshi)
    * Fixed bug [GH-15515](https://github.com/php/php-src/issues/15515) (Configure error grep illegal option     q). (Peter Kokot)
    * Fixed bug [GH-15514](https://github.com/php/php-src/issues/15514) (Configure error: genif.sh: syntax     error). (Peter Kokot)
    * Fixed bug [GH-15565](https://github.com/php/php-src/issues/15565) (--disable-ipv6 during compilation     produces error EAI_SYSTEM not found). (nielsdos)
    * Fixed bug [GH-15587](https://github.com/php/php-src/issues/15587) (CRC32 API build error on arm 32-bit).
    (Bernd Kuhls, Thomas Petazzoni)
    * Fixed bug [GH-15330](https://github.com/php/php-src/issues/15330) (Do not scan generator frames more     than once). (Arnaud)
    * Fixed uninitialized lineno in constant AST of internal enums. (ilutov)

    **Curl:**

    * FIxed bug [GH-15547](https://github.com/php/php-src/issues/15547) (curl_multi_select overflow on timeout     argument). (David Carlier)

    **DOM:**

    * Fixed bug [GH-15551](https://github.com/php/php-src/issues/15551) (Segmentation fault (access null     pointer) in ext/dom/xml_common.h). (nielsdos)

    **Fileinfo:**

    * Fixed bug [GH-15752](https://github.com/php/php-src/issues/15752) (Incorrect error message for     finfo_file with an empty filename argument). (DanielEScherzer)

    **FPM:**

    * Fixed bug [GHSA-865w-9rf3-2wh5](https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5)     (Logs from childrens may be altered). (**CVE-2024-9026**) (Jakub Zelenka)

    **MySQLnd:**

    * Fixed bug [GH-15432](https://github.com/php/php-src/issues/15432) (Heap corruption when querying a     vector). (cmb, Kamil Tekiela)

    **Opcache:**

    * Fixed bug [GH-15661](https://github.com/php/php-src/issues/15661) (Access null pointer in     Zend/Optimizer/zend_inference.c). (nielsdos)
    * Fixed bug [GH-15658](https://github.com/php/php-src/issues/15658) (Segmentation fault in     Zend/zend_vm_execute.h). (nielsdos)

    **SAPI:**

    * Fixed bug [GHSA-9pqp-7h25-4f32](https://github.com/php/php-src/security/advisories/GHSA-9pqp-7h25-4f32)     (Erroneous parsing of multipart form data). (**CVE-2024-8925**) (Arnaud)

    **SOAP:**

    * Fixed bug php#73182 (PHP SOAPClient does not support stream context HTTP headers in array form).
    (nielsdos)

    **Standard:**

    * Fixed bug [GH-15552](https://github.com/php/php-src/issues/15552) (Signed integer overflow in     ext/standard/scanf.c). (cmb)

    **Streams:**

    * Fixed bug [GH-15628](https://github.com/php/php-src/issues/15628) (php_stream_memory_get_buffer() not     zero-terminated). (cmb)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php81 installed on the remote host is prior to 8.1.30. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-297-01 advisory.

    New php81 packages are available for Slackware 15.0 to fix security issues.

Tenable has extracted the preceding description block directly from the php81 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a03b06dbd0 advisory.

    **PHP version 8.3.12** (26 Sep 2024)

    **CGI:**

    * Fixed bug [GHSA-p99j-rfp4-xqvq](https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq)     (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (**CVE-2024-8926**) (nielsdos)
    * Fixed bug [GHSA-94p6-54jq-9mwp](https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp)     (cgi.force_redirect configuration is bypassable due to the environment variable collision).
    (**CVE-2024-8927**) (nielsdos)

    **Core:**

    * Fixed bug [GH-15408](https://github.com/php/php-src/issues/15408) (MSan false-positve on     zend_max_execution_timer). (zeriyoshi)
    * Fixed bug [GH-15515](https://github.com/php/php-src/issues/15515) (Configure error grep illegal option     q). (Peter Kokot)
    * Fixed bug [GH-15514](https://github.com/php/php-src/issues/15514) (Configure error: genif.sh: syntax     error). (Peter Kokot)
    * Fixed bug [GH-15565](https://github.com/php/php-src/issues/15565) (--disable-ipv6 during compilation     produces error EAI_SYSTEM not found). (nielsdos)
    * Fixed bug [GH-15587](https://github.com/php/php-src/issues/15587) (CRC32 API build error on arm 32-bit).
    (Bernd Kuhls, Thomas Petazzoni)
    * Fixed bug [GH-15330](https://github.com/php/php-src/issues/15330) (Do not scan generator frames more     than once). (Arnaud)
    * Fixed uninitialized lineno in constant AST of internal enums. (ilutov)

    **Curl:**

    * FIxed bug [GH-15547](https://github.com/php/php-src/issues/15547) (curl_multi_select overflow on timeout     argument). (David Carlier)

    **DOM:**

    * Fixed bug [GH-15551](https://github.com/php/php-src/issues/15551) (Segmentation fault (access null     pointer) in ext/dom/xml_common.h). (nielsdos)
    * Fixed bug [GH-15654](https://github.com/php/php-src/issues/15654) (Signed integer overflow in     ext/dom/nodelist.c). (nielsdos)

    **Fileinfo:**

    * Fixed bug [GH-15752](https://github.com/php/php-src/issues/15752) (Incorrect error message for     finfo_file with an empty filename argument). (DanielEScherzer)

    **FPM:**

    * Fixed bug [GHSA-865w-9rf3-2wh5](https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5)     (Logs from childrens may be altered). (**CVE-2024-9026**) (Jakub Zelenka)

    **MySQLnd:**

    * Fixed bug [GH-15432](https://github.com/php/php-src/issues/15432) (Heap corruption when querying a     vector). (cmb, Kamil Tekiela)

    **Opcache:**

    * Fixed bug [GH-15661](https://github.com/php/php-src/issues/15661) (Access null pointer in     Zend/Optimizer/zend_inference.c). (nielsdos)
    * Fixed bug [GH-15658](https://github.com/php/php-src/issues/15658) (Segmentation fault in     Zend/zend_vm_execute.h). (nielsdos)

    **SAPI:**

    * Fixed bug [GHSA-9pqp-7h25-4f32](https://github.com/php/php-src/security/advisories/GHSA-9pqp-7h25-4f32)     (Erroneous parsing of multipart form data). (**CVE-2024-8925**) (Arnaud)

    **Standard:**

    * Fixed bug [GH-15552](https://github.com/php/php-src/issues/15552) (Signed integer overflow in     ext/standard/scanf.c). (cmb)

    **Streams:**

    * Fixed bug [GH-15628](https://github.com/php/php-src/issues/15628) (php_stream_memory_get_buffer() not     zero-terminated). (cmb)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
208123	Fedora 39 : php (2024-7c800c4df7)	Nessus	Fedora Local Security Checks	10/4/2024	11/3/2025	critical
209567	Slackware Linux 15.0 php81 の複数の脆弱性 (SSA:2024-297-01)	Nessus	Slackware Local Security Checks	10/23/2024	11/3/2025	critical
200161	PHP 8.3.x < 8.3.8 Multiple Vulnerabilities	Nessus	CGI abuses	6/6/2024	5/26/2025	critical
200177	Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-158-01)	Nessus	Slackware Local Security Checks	6/6/2024	10/4/2024	critical
208123	Fedora 39 : php (2024-7c800c4df7)	Nessus	Fedora Local Security Checks	10/4/2024	11/3/2025	critical
209567	Slackware Linux 15.0 php81 Multiple Vulnerabilities (SSA:2024-297-01)	Nessus	Slackware Local Security Checks	10/23/2024	11/3/2025	critical
211244	Fedora 41 : php (2024-a03b06dbd0)	Nessus	Fedora Local Security Checks	11/14/2024	11/3/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical