Количество 33
Количество 33
BDU:2026-01641
Уязвимость функции metaphone() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать ошибку сегментации и вызвать отказ в обслуживании
ROS-20260831-80-0020
Уязвимость php 8.5
ROS-20260831-80-0019
Уязвимость php 8.4
ROS-20260831-80-0018
Уязвимость php 8.3
ROS-20260831-80-0017
Уязвимость php
ROS-20260831-73-0016
Уязвимость php 8.4
ROS-20260831-73-0015
Уязвимость php 8.3
ROS-20260831-73-0014
Уязвимость php
CVE-2026-7568
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.
CVE-2026-7568
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.
CVE-2026-7568
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.
CVE-2026-7568
Signed integer overflow in metaphone()
CVE-2026-7568
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...
GHSA-96wq-48vp-hh57
Signed integer overflow in metaphone()
RLSA-2026:22305
Important: php:8.2 security update
RLSA-2026:22143
Important: php:8.2 security update
RLSA-2026:22142
Important: php:8.3 security update
ELSA-2026-22305
ELSA-2026-22305: php:8.2 security update (IMPORTANT)
ELSA-2026-22143
ELSA-2026-22143: php:8.2 security update (IMPORTANT)
ELSA-2026-22142
ELSA-2026-22142: php:8.3 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-01641 Уязвимость функции metaphone() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать ошибку сегментации и вызвать отказ в обслуживании | 0% Низкий | 4 месяца назад | |
 | ROS-20260831-80-0020 Уязвимость php 8.5 | 0% Низкий | 15 дней назад | |
| ROS-20260831-80-0019 Уязвимость php 8.4 | 0% Низкий | 15 дней назад | |
| ROS-20260831-80-0018 Уязвимость php 8.3 | 0% Низкий | 15 дней назад | |
| ROS-20260831-80-0017 Уязвимость php | 0% Низкий | 15 дней назад | |
| ROS-20260831-73-0016 Уязвимость php 8.4 | 0% Низкий | 15 дней назад | |
| ROS-20260831-73-0015 Уязвимость php 8.3 | 0% Низкий | 15 дней назад | |
| ROS-20260831-73-0014 Уязвимость php | 0% Низкий | 15 дней назад | |
 | CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-7568 Signed integer overflow in metaphone() | 0% Низкий | 3 месяца назад | |
| CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ... | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| GHSA-96wq-48vp-hh57 Signed integer overflow in metaphone() | 0% Низкий | 4 месяца назад | |
 | RLSA-2026:22305 Important: php:8.2 security update | 4 месяца назад | ||
| RLSA-2026:22143 Important: php:8.2 security update | 4 месяца назад | ||
| RLSA-2026:22142 Important: php:8.3 security update | 4 месяца назад | ||
| ELSA-2026-22305 ELSA-2026-22305: php:8.2 security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-22143 ELSA-2026-22143: php:8.2 security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-22142 ELSA-2026-22142: php:8.3 security update (IMPORTANT) | 3 месяца назад |
Уязвимостей на страницу