Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 25

Количество 25

fstec логотип

BDU:2026-01641

3 месяца назад

Уязвимость функции metaphone() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать ошибку сегментации и вызвать отказ в обслуживании

EPSS: Низкий
ubuntu логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2026-7568

около 2 месяцев назад

Signed integer overflow in metaphone()

EPSS: Низкий
debian логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-96wq-48vp-hh57

3 месяца назад

Signed integer overflow in metaphone()

EPSS: Низкий
rocky логотип

RLSA-2026:22305

около 2 месяцев назад

Important: php:8.2 security update

EPSS: Низкий
rocky логотип

RLSA-2026:22143

2 месяца назад

Important: php:8.2 security update

EPSS: Низкий
rocky логотип

RLSA-2026:22142

2 месяца назад

Important: php:8.3 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-22305

около 2 месяцев назад

ELSA-2026-22305: php:8.2 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2026-22143

около 1 месяца назад

ELSA-2026-22143: php:8.2 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2026-22142

около 1 месяца назад

ELSA-2026-22142: php:8.3 security update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:23388

около 2 месяцев назад

Important: php security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-23388

15 дней назад

ELSA-2026-23388: php security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2091-1

2 месяца назад

Security update for php7

EPSS: Низкий
rocky логотип

RLSA-2026:34354

29 дней назад

Important: php:7.4 security update

EPSS: Низкий
rocky логотип

RLSA-2026:22649

около 2 месяцев назад

Important: php8.4 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-34354

29 дней назад

ELSA-2026-34354: php:7.4 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2026-22649

14 дней назад

ELSA-2026-22649: php8.4 security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2026-01641

Уязвимость функции metaphone() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать ошибку сегментации и вызвать отказ в обслуживании

0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
0%
Низкий
3 месяца назад
msrc логотип
CVE-2026-7568

Signed integer overflow in metaphone()

0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...

CVSS3: 7.5
0%
Низкий
3 месяца назад
github логотип
GHSA-96wq-48vp-hh57

Signed integer overflow in metaphone()

0%
Низкий
3 месяца назад
rocky логотип
RLSA-2026:22305

Important: php:8.2 security update

около 2 месяцев назад
rocky логотип
RLSA-2026:22143

Important: php:8.2 security update

2 месяца назад
rocky логотип
RLSA-2026:22142

Important: php:8.3 security update

2 месяца назад
oracle-oval логотип
ELSA-2026-22305

ELSA-2026-22305: php:8.2 security update (IMPORTANT)

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-22143

ELSA-2026-22143: php:8.2 security update (IMPORTANT)

около 1 месяца назад
oracle-oval логотип
ELSA-2026-22142

ELSA-2026-22142: php:8.3 security update (IMPORTANT)

около 1 месяца назад
rocky логотип
RLSA-2026:23388

Important: php security update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-23388

ELSA-2026-23388: php security update (IMPORTANT)

15 дней назад
suse-cvrf логотип
SUSE-SU-2026:2091-1

Security update for php7

2 месяца назад
rocky логотип
RLSA-2026:34354

Important: php:7.4 security update

29 дней назад
rocky логотип
RLSA-2026:22649

Important: php8.4 security update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-34354

ELSA-2026-34354: php:7.4 security update (IMPORTANT)

29 дней назад
oracle-oval логотип
ELSA-2026-22649

ELSA-2026-22649: php8.4 security update (IMPORTANT)

14 дней назад

Уязвимостей на страницу