The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0018 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-21707:
    In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing     functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains     URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus     interpreting the filename differently from what the user intended, which may lead it to reading a     different file than intended.

    CVE-2021-21708:
    In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions     with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to     trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of     other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.

    CVE-2021-32610:
    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different     vulnerability than CVE-2020-36193.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5082 advisory.

    Two security issues were found in PHP, a widely-used open source general purpose scripting language which     could result in information disclosure or denial of service. For the stable distribution (bullseye), these     problems have been fixed in version 7.4.28-1+deb11u1. We recommend that you upgrade your php7.4 packages.
    For the detailed security status of php7.4 please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/php7.4

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-073 advisory.

    A flaw was found in php.  The main cause of this vulnerability is improper input validation while parsing     an Extensible Markup Language(XML) entity.  A special character could allow an attacker to traverse     directories. The highest threat from this vulnerability is confidentiality. (CVE-2021-21707)

    A flaw was found in PHP. The vulnerability occurs due to the malformed php_filter_float() function and     leads to a use-after-free vulnerability. This flaw allows an attacker to inject a malicious file, leading     to a crash or a Segmentation fault. (CVE-2021-21708)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7628 advisory.

  - php: Special character breaks path in xml parsing (CVE-2021-21707)

  - php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)

  - php-pear: Directory traversal vulnerability (CVE-2021-32610)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3243 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3243-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     December 15, 2022                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : php7.3     Version        : 7.3.31-1~deb10u2     CVE ID         : CVE-2021-21707 CVE-2022-31625 CVE-2022-31626 CVE-2022-31628                      CVE-2022-31629 CVE-2022-37454

    Multiple security issues were discovered in PHP, a widely-used open     source general purpose scripting language which could result in denial     of service, information disclosure, insecure cooking handling or     potentially the execution of arbitrary code.

    For Debian 10 buster, these problems have been fixed in version     7.3.31-1~deb10u2.

    We recommend that you upgrade your php7.3 packages.

    For the detailed security status of php7.3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/php7.3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3943-1 advisory.

  - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running     PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-     privileged users, it is possible for the child processes to access memory shared with the main process and     write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and     writes, which can be used to escalate privileges from local unprivileged user to the root user.
    (CVE-2021-21703)

  - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing     functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains     URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus     interpreting the filename differently from what the user intended, which may lead it to reading a     different file than intended. (CVE-2021-21707)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5300-1 advisory.

    It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue     to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)

    It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue     to cause a denial of service, or possibly obtain sensitive information. (CVE-2017-9119)

    It was discovered that PHP incorrectly handled certain scripts with XML parsing functions. An attacker     could possibly use this issue to obtain sensitive information. (CVE-2021-21707)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0679-1 advisory.

  - An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-     fpm master process restarts a child process in an endless loop when using program execution functions     (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master     process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as     demonstrated by an attack by a customer of a shared-hosting facility. (CVE-2015-9253)

  - The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to     string objects that result in a negative length, which allows remote attackers to cause a denial of     service (application crash) or possibly have unspecified other impact by leveraging a script's use of .=     with a long string. (CVE-2017-8923)

  - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running     PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-     privileged users, it is possible for the child processes to access memory shared with the main process and     write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and     writes, which can be used to escalate privileges from local unprivileged user to the root user.
    (CVE-2021-21703)

  - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing     functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains     URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus     interpreting the filename differently from what the user intended, which may lead it to reading a     different file than intended. (CVE-2021-21707)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
236672	Alibaba Cloud Linux 3 : 0018: php:7.4 (ALINUX3-SA-2023:0018)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	critical
158202	Debian DSA-5082-1 : php7.4 - security update	Nessus	Debian Local Security Checks	2/21/2022	1/24/2025	critical
164734	Amazon Linux 2022 : php, php-bcmath, php-cli (ALAS2022-2022-073)	Nessus	Amazon Linux Local Security Checks	9/6/2022	12/11/2024	critical
167186	CentOS 8 : php:7.4 (CESA-2022:7628)	Nessus	CentOS Local Security Checks	11/9/2022	10/18/2023	critical
168859	Debian dla-3243 : libapache2-mod-php7.3 - security update	Nessus	Debian Local Security Checks	12/16/2022	1/22/2025	critical
155876	openSUSE 15 : Recommended update for php7 (openSUSE-SU-2021:3943-1)	Nessus	SuSE Local Security Checks	12/7/2021	11/22/2023	high
158273	Ubuntu 16.04 ESM : PHP vulnerabilities (USN-5300-1)	Nessus	Ubuntu Local Security Checks	2/23/2022	8/27/2024	critical
158582	SUSE SLES15 Security Update : php7 (SUSE-SU-2022:0679-1)	Nessus	SuSE Local Security Checks	3/3/2022	10/18/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

high

critical

critical