Поиск уязвимостей
Количество 81
Количество 81
ALT-PU-2026-12306
ALT-PU-2026-12306: package `php8.3` update to version 8.3.33-alt1
SUSE-SU-2026:3513-1
Security update for php8
SUSE-SU-2026:3510-1
Security update for php7
SUSE-SU-2026:3509-1
Security update for php8
ALT-PU-2026-12843
ALT-PU-2026-12843: package `php8.5-soap` update to version 8.5.9-alt1
ALT-PU-2026-12842
ALT-PU-2026-12842: package `php8.4-soap` update to version 8.4.24-alt1
ALT-PU-2026-12287
ALT-PU-2026-12287: package `php8.4` update to version 8.4.24-alt1
ALT-PU-2026-12285
ALT-PU-2026-12285: package `php8.5` update to version 8.5.9-alt1
CVE-2026-14355
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort.
CVE-2026-14355
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort.
CVE-2026-14355
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort.
CVE-2026-14355
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
CVE-2026-14355
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before ...
openSUSE-SU-2026:21532-1
Security update for php8
SUSE-SU-2026:3165-1
Security update for php7
ROS-20260902-80-0029
Уязвимость php 8.5
ROS-20260902-80-0028
Уязвимость php 8.4
ROS-20260902-80-0027
Уязвимость php 8.3
ROS-20260902-80-0026
Уязвимость php
ROS-20260902-73-0027
Уязвимость php 8.4
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-12306 ALT-PU-2026-12306: package `php8.3` update to version 8.3.33-alt1 | CVSS3: 9.8 | 3 месяца назад | |
 | SUSE-SU-2026:3513-1 Security update for php8 | 3 месяца назад | ||
| SUSE-SU-2026:3510-1 Security update for php7 | 3 месяца назад | ||
| SUSE-SU-2026:3509-1 Security update for php8 | 3 месяца назад | ||
| ALT-PU-2026-12843 ALT-PU-2026-12843: package `php8.5-soap` update to version 8.5.9-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12842 ALT-PU-2026-12842: package `php8.4-soap` update to version 8.4.24-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12287 ALT-PU-2026-12287: package `php8.4` update to version 8.4.24-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12285 ALT-PU-2026-12285: package `php8.5` update to version 8.5.9-alt1 | CVSS3: 9.8 | 3 месяца назад | |
 | CVE-2026-14355 In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-14355 In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort. | CVSS3: 5.6 | 0% Низкий | 4 месяца назад |
 | CVE-2026-14355 In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-14355 ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD | CVSS3: 5.6 | 0% Низкий | 4 месяца назад |
| CVE-2026-14355 In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before ... | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| openSUSE-SU-2026:21532-1 Security update for php8 | 3 месяца назад | ||
| SUSE-SU-2026:3165-1 Security update for php7 | 0% Низкий | 4 месяца назад | |
 | ROS-20260902-80-0029 Уязвимость php 8.5 | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| ROS-20260902-80-0028 Уязвимость php 8.4 | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| ROS-20260902-80-0027 Уязвимость php 8.3 | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| ROS-20260902-80-0026 Уязвимость php | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| ROS-20260902-73-0027 Уязвимость php 8.4 | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу