Количество 10
Количество 10
GHSA-9f67-6fw4-hpfp
PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
CVE-2026-17545
On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.
CVE-2026-17545
On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.
CVE-2026-17545
On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.
CVE-2026-17545
PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
CVE-2026-17545
On Windows, PHP's filesystem and stream APIs do not reject reserved de ...
ALT-PU-2026-17471
ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1
ALT-PU-2026-17464
ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1
ALT-PU-2026-17462
ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1
ALT-PU-2026-17414
ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9f67-6fw4-hpfp PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS | 0% Низкий | около 1 месяца назад | |
 | CVE-2026-17545 On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes. | 0% Низкий | 29 дней назад | |
 | CVE-2026-17545 On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes. | CVSS3: 5.9 | 0% Низкий | 29 дней назад |
 | CVE-2026-17545 On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes. | 0% Низкий | 29 дней назад | |
 | CVE-2026-17545 PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS | 0% Низкий | 24 дня назад | |
| CVE-2026-17545 On Windows, PHP's filesystem and stream APIs do not reject reserved de ... | 0% Низкий | 29 дней назад | |
| ALT-PU-2026-17471 ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1 | CVSS3: 7.5 | 19 дней назад | |
| ALT-PU-2026-17464 ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1 | CVSS3: 7.5 | 19 дней назад | |
| ALT-PU-2026-17462 ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1 | CVSS3: 7.5 | 19 дней назад | |
| ALT-PU-2026-17414 ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1 | CVSS3: 7.5 | 19 дней назад |
Уязвимостей на страницу