PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 984
GHSA-2c24-m9rj-gq8m
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.
CVE-2022-31627
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.
CVE-2022-31627
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as fi ...
CVE-2022-31627
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.
BDU:2024-07319
Уязвимость языка программирования PHP, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2022-4900
A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
BDU:2023-02666
Уязвимость функции php_cli_server_startup_workers (sapi/cli/php_cli_server.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2022-31627
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.
ELSA-2022-5467
ELSA-2022-5467: php:7.4 security update (IMPORTANT)
ELSA-2022-5468
ELSA-2022-5468: php:8.0 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-2c24-m9rj-gq8m In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption. | CVSS3: 9.8 | 2% Низкий | около 4 лет назад |
 | CVE-2022-31627 In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption. | CVSS3: 7.7 | 2% Низкий | около 4 лет назад |
| CVE-2022-31627 In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as fi ... | CVSS3: 7.7 | 2% Низкий | около 4 лет назад |
 | CVE-2022-31627 In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption. | CVSS3: 7.7 | 2% Низкий | около 4 лет назад |
 | BDU:2024-07319 Уязвимость языка программирования PHP, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 1% Низкий | около 4 лет назад |
 | CVE-2022-4900 A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow. | CVSS3: 6.2 | 0% Низкий | около 4 лет назад |
| BDU:2023-02666 Уязвимость функции php_cli_server_startup_workers (sapi/cli/php_cli_server.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.2 | 0% Низкий | около 4 лет назад |
| CVE-2022-31627 In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption. | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
| ELSA-2022-5467 ELSA-2022-5467: php:7.4 security update (IMPORTANT) | 58% Средний | около 4 лет назад | |
| ELSA-2022-5468 ELSA-2022-5468: php:8.0 security update (IMPORTANT) | 58% Средний | около 4 лет назад |
Уязвимостей на страницу