Поиск уязвимостей

Уязвимость класса SoapServer интерпретатора языка программирования PHP, связанная с использованием памяти после её освобождения, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании

Уязвимость php 8.5

Уязвимость php 8.4

Уязвимость php 8.3

Уязвимость php

Уязвимость php 8.4

Уязвимость php 8.3

Уязвимость php

ALT-PU-2026-9831: package `php8.2-soap` update to version 8.2.31-alt1

ALT-PU-2026-8355: package `php8.2-soap` update to version 8.2.31-alt1

ALT-PU-2026-8952: package `php8.2` update to version 8.2.31-alt1

ALT-PU-2026-8353: package `php8.3-soap` update to version 8.3.31-alt1

ALT-PU-2026-8045: package `php8.3` update to version 8.3.31-alt1

ALT-PU-2026-8043: package `php8.2` update to version 8.2.31-alt1

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the handler object is persisted across requests via session storage. However, in the case SOAP requests results in an error, the persistance is handled incorrectly, resulting in freeing the object while keeping a pointer to it, which may lead to use-after-free. This may lead to memory corruption, information disclosure, or process crashes, with confidentiality, integrity, and availability impact on the vulnerable system.

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the handler object is persisted across requests via session storage. However, in the case SOAP requests results in an error, the persistance is handled incorrectly, resulting in freeing the object while keeping a pointer to it, which may lead to use-after-free. This may lead to memory corruption, information disclosure, or process crashes, with confidentiality, integrity, and availability impact on the vulnerable system.

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the handler object is persisted across requests via session storage. However, in the case SOAP requests results in an error, the persistance is handled incorrectly, resulting in freeing the object while keeping a pointer to it, which may lead to use-after-free. This may lead to memory corruption, information disclosure, or process crashes, with confidentiality, integrity, and availability impact on the vulnerable system.

SoapServer session-persisted object use-after-free via SOAP header fault

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...

ALT-PU-2026-8354: package `php8.4-soap` update to version 8.4.21-alt1