PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 867
openSUSE-SU-2019:2457-1
Security update for php7
CVE-2019-11050
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
SUSE-SU-2019:2909-1
Security update for php72
RLSA-2019:3736
Critical: php:7.3 security update
RLSA-2019:3735
Critical: php:7.2 security update
openSUSE-SU-2019:2441-1
Security update for php7
SUSE-SU-2019:2819-1
Security update for php7
SUSE-SU-2019:2809-1
Security update for php7
CVE-2019-11043
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
CVE-2019-11043
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
openSUSE-SU-2019:2457-1 Security update for php7 | 94% Критический | около 6 лет назад | ||
CVE-2019-11050 When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash. | CVSS3: 6.5 | 3% Низкий | около 6 лет назад | |
SUSE-SU-2019:2909-1 Security update for php72 | 94% Критический | около 6 лет назад | ||
RLSA-2019:3736 Critical: php:7.3 security update | 94% Критический | около 6 лет назад | ||
RLSA-2019:3735 Critical: php:7.2 security update | 94% Критический | около 6 лет назад | ||
openSUSE-SU-2019:2441-1 Security update for php7 | 94% Критический | около 6 лет назад | ||
SUSE-SU-2019:2819-1 Security update for php7 | 94% Критический | около 6 лет назад | ||
SUSE-SU-2019:2809-1 Security update for php7 | 94% Критический | около 6 лет назад | ||
CVE-2019-11043 In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution. | CVSS3: 8.7 | 94% Критический | около 6 лет назад | |
CVE-2019-11043 In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below ... | CVSS3: 8.7 | 94% Критический | около 6 лет назад |
Уязвимостей на страницу